894 matches found
[slackware-security] fetchmail
New fetchmail packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/fetchmail-6.4.27-i586-2slack15.0.txz: Rebuilt. This update fixes a security issue: fetchmail SMTP client can crash when...
Slackware Linux 15.0 / current fetchmail Vulnerability (SSA:2025-276-01)
The version of fetchmail installed on the remote host is prior to 6.4.27 / 6.5.6. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-276-01 advisory. New fetchmail packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the...
FreeBSD : fetchmail -- potential crash when authenticating to SMTP server (21fba35e-a05f-11f0-a8b8-a1ef31191bc1)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 21fba35e-a05f-11f0-a8b8-a1ef31191bc1 advisory. Matthias Andree reports: fetchmail's SMTP client, when configured to authenticate, is susceptible to a...
fetchmail -- potential crash when authenticating to SMTP server
Matthias Andree reports: fetchmail's SMTP client, when configured to authenticate, is susceptible to a protocol violation where, when a trusted but malicious or malfunctioning SMTP server responds to an authentication request with a "334" code but without a following blank on the line, it will...
Linux Distros Unpatched Vulnerability : CVE-2021-36386
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reportvbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf valist argument, which might allow mail servers to cause a...
Alibaba Cloud Linux 3 : 0198: fetchmail (ALINUX3-SA-2022:0198)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0198 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-36386: reportvbuild in report.c i...
Linux Distros Unpatched Vulnerability : CVE-2021-39272
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH. CVE-2021-39272 No...
Linux Distros Unpatched Vulnerability : CVE-2012-3482
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to 1 cause a denial of service crash and delayed delive...
Linux Distros Unpatched Vulnerability : CVE-2011-1947
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a 1 STARTTLS or 2 STLS request, which allows remote servers to cause a denial...
Linux Distros Unpatched Vulnerability : CVE-2010-1167
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attacke...
RHSA-2022:1964 Red Hat Security Advisory: fetchmail security update
Bulletin has no description...
RHSA-2009:1427 Red Hat Security Advisory: fetchmail security update
Bulletin has no description...
RHSA-2007:0385 Red Hat Security Advisory: fetchmail security update
Bulletin has no description...
RHSA-2007:0018 Red Hat Security Advisory: fetchmail security update
Bulletin has no description...
RHSA-2005:640 Red Hat Security Advisory: fetchmail security update
Bulletin has no description...
SUSE: Security Advisory (SUSE-SU-2024:3006-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : fetchmail (SUSE-SU-2024:3006-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3006-1 advisory. - Fixed regression in patch for CVE-2021-36386 bsc1224188 Tenable has extracted the preceding description block directly from the SUSE...
SUSE-SU-2024:3006-1 Security update for fetchmail
This update for fetchmail fixes the following issues: - Fixed regression in patch for CVE-2021-36386 bsc1224188...
ROS-20240723-04
A vulnerability in the fetchmail mail receiving and forwarding utility is related to incorrect resource initialization. Exploitation of the vulnerability may allow an attacker to gain access to confidential information...