Critical: Red Hat Security Advisory: : Updated fetchmail packages fix vulnerabilities

Updated fetchmail packages are available for Red Hat Linux 6.2, 7, 7.1, 7.2, 7.3, and 8.0 which close a remotely-exploitable vulnerability in unpatched versions of fetchmail prior to 6.1.0. Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links su...

DSA-171 fetchmail - buffer overflows

Bulletin has no description...

CVE-2002-1175

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service crash when Fetchmail attempts to read data beyond the expected boundary...

CVE-2002-1174

Fetchmail

CVE-2002-1175

CVE-2002-1175 concerns Fetchmail’s getmxrecord boundary handling. The advisory states that Fetchmail versions 6.0.0 and earlier are vulnerable to a malformed DNS packet causing a denial of service (crash) when reading beyond boundaries, notably when used in multi‑drop mode. Connected sources indi...

CVE-2002-1174

Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 long headers that are not properly processed by the readheaders function, or 2 via long Received: headers, which are not properly parsed by the parsereceived...

CVE-2002-1175

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service crash when Fetchmail attempts to read data beyond the expected boundary...

CVE-2002-1174

Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 long headers that are not properly processed by the readheaders function, or 2 via long Received: headers, which are not properly parsed by the parsereceived...

Advisory 03/2002: Fetchmail remote vulnerabilities

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Fetchmail remote vulnerabilities Release Date: 2002/09/29 Last Modified: 2002/09/29 Author: Stefan Esser [email protected] Application: Fetchmail = 6.0.0 Severity: Several vulnerabilities within Fetchmail could allow remote...

CVE-2002-0146

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...

CVE-2001-0819

CVE-2001-0819 corresponds to a buffer overflow in Linux fetchmail before 5.8.6, exploitable by a remote attacker via a large To: header in an email. The vulnerability is due to an overflow in the header parser, allowing arbitrary code execution. Affected software is fetchmail on Linux, with advis...

CVE-2001-0819

A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header...

CVE-2001-1009

CVE-2001-1009 affects fetchmail (fetchmail-ssl) prior to 5.8.17. Multiple OpenVAS/DSA/Nessus entries describe a memory corruption in the IMAP and POP3 code where unverified input and missing bounds checking can allow a remote attacker—by controlling the server the client connects to—to cause writ...

CVE-2001-1009

Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...

CVE-2001-0819

A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header...

CVE-2001-1009

Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...

Дырка в fetchmail (buffer overflow)

Ошибка в AUTHENTICATE GSSAPI, переполнение буфера при разборе заголовков. Ошибки при разборе индексов писем выход за пределы массива...

Fetchmail security advisory

Fetchmail advisory, copyrightC 2001 Salvatore Sanfilippo Distribution of this document is unlimited. THE PROBLEM In a security auditing I found two remotly explotiable memory corruption problems. The bug, that is similar in the file pop3.c and imap.c, allows an attacker to 'poke' arbitrary memory...

[SECURITY] [DSA-071-1] fetchmail remote exploit

Package : fetchmail Problem type : memory corruption Debian-specific: no Salvatore Sanfilippo found two remotely exploitable problems in fetchmail while doing a security audit. In both the imap and pop3 code the input is not verified and used to store a number in an array. Since no bounds checkin...

Fetchmail 5.x - POP3 Reply Signed Integer Index

Fetchmail 5.x - POP3 Reply Signed Integer Index // source: https://www.securityfocus.com/bid/3164/info Fetchmail is a unix utility for downloading email from mail servers via POP3. Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems. The...