938 matches found
DSA-171 fetchmail - buffer overflows
Bulletin has no description...
CVE-2002-1174
Fetchmail
CVE-2002-1174
Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 long headers that are not properly processed by the readheaders function, or 2 via long Received: headers, which are not properly parsed by the parsereceived...
CVE-2002-1175
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service crash when Fetchmail attempts to read data beyond the expected boundary...
CVE-2002-1175
CVE-2002-1175 concerns Fetchmail’s getmxrecord boundary handling. The advisory states that Fetchmail versions 6.0.0 and earlier are vulnerable to a malformed DNS packet causing a denial of service (crash) when reading beyond boundaries, notably when used in multi‑drop mode. Connected sources indi...
CVE-2002-1174
Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 long headers that are not properly processed by the readheaders function, or 2 via long Received: headers, which are not properly parsed by the parsereceived...
CVE-2002-1175
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service crash when Fetchmail attempts to read data beyond the expected boundary...
CVE-2002-1174: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 long headers that are not properly processed by the readheaders function, or 2 via long Received: headers, which are not properly parsed by the parsereceived...
CVE-2002-1175: Improper Input Validation
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service crash when Fetchmail attempts to read data beyond the expected boundary...
Advisory 03/2002: Fetchmail remote vulnerabilities
e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Fetchmail remote vulnerabilities Release Date: 2002/09/29 Last Modified: 2002/09/29 Author: Stefan Esser [email protected] Application: Fetchmail = 6.0.0 Severity: Several vulnerabilities within Fetchmail could allow remote...
CVE-2002-0146
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...
CVE-2001-0819
A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header...
CVE-2001-0819
CVE-2001-0819 corresponds to a buffer overflow in Linux fetchmail before 5.8.6, exploitable by a remote attacker via a large To: header in an email. The vulnerability is due to an overflow in the header parser, allowing arbitrary code execution. Affected software is fetchmail on Linux, with advis...
CVE-2001-0819: Improper Restriction of Operations within the Bounds of a Memory Buffer
A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header...
CVE-2001-1009
CVE-2001-1009 affects fetchmail (fetchmail-ssl) prior to 5.8.17. Multiple OpenVAS/DSA/Nessus entries describe a memory corruption in the IMAP and POP3 code where unverified input and missing bounds checking can allow a remote attacker—by controlling the server the client connects to—to cause writ...
CVE-2001-1009
Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...
CVE-2001-1009: Undefined Security Weakness
Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...
CVE-2001-0819
A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header...
CVE-2001-1009
Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...