Fetchmail security advisory

Fetchmail advisory, copyrightC 2001 Salvatore Sanfilippo Distribution of this document is unlimited. THE PROBLEM In a security auditing I found two remotly explotiable memory corruption problems. The bug, that is similar in the file pop3.c and imap.c, allows an attacker to 'poke' arbitrary memory...

[SECURITY] [DSA-071-1] fetchmail remote exploit

Package : fetchmail Problem type : memory corruption Debian-specific: no Salvatore Sanfilippo found two remotely exploitable problems in fetchmail while doing a security audit. In both the imap and pop3 code the input is not verified and used to store a number in an array. Since no bounds checkin...

Fetchmail 5.x - IMAP Reply Signed Integer Index

// source: https://www.securityfocus.com/bid/3166/info Fetchmail is a unix utility for downloading email from mail servers via POP3 and IMAP. Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems. The vulnerability has to do with the use of a...

Fetchmail 5.x - POP3 Reply Signed Integer Index

Fetchmail 5.x - POP3 Reply Signed Integer Index // source: https://www.securityfocus.com/bid/3164/info Fetchmail is a unix utility for downloading email from mail servers via POP3. Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems. The...

Fetchmail 5.x - IMAP Reply Signed Integer Index

Fetchmail 5.x - IMAP Reply Signed Integer Index // source: https://www.securityfocus.com/bid/3166/info Fetchmail is a unix utility for downloading email from mail servers via POP3 and IMAP. Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems. Th...

Fetchmail 5.x - POP3 Reply Signed Integer Index

// source: https://www.securityfocus.com/bid/3164/info Fetchmail is a unix utility for downloading email from mail servers via POP3. Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems. The vulnerability has to do with the use of a remotely...

FreeBSD-SA-01:43.fetchmail

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:43 Security Advisory FreeBSD, Inc. Topic: fetchmail contains potentially exploitable buffer overflow Category: ports Module: fetchmail Announced: 2001-07-10 Credits:...

[SECURITY] [DSA-060-1] fetchmail buffer overflow

Package : fetchmail Problem type : buffer overflow Debian-specific: no Wolfram Kleff found a problem in fetchmail: it would crash when processing emails with extremely long headers. The problem was a buffer overflow in the header parser which could be exploited. This has been fixed in version...

fetchmail update -- Immunix OS 6.2, 7.0-beta, 7.0

----------------------------------------------------------------------- Immunix OS Security Advisory Packages updated: fetchmail Affected products: Immunix OS 6.2, 7.0-beta, and 7.0 Bugs fixed: immunix/1618 Date: Wed Jun 13 2001 Advisory ID: IMNX-2001-70-025-01 Author: Seth Arnold [email protected]...

CVE-2001-0101

Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command...

CVE-2001-0101

CVE-2001-0101 affects fetchmail 5.5.0-2 and earlier, with vulnerability in the AUTHENTICATE GSSAPI command. The available connected records confirm the affected software and the vulnerable component, but do not provide further technical details on root cause, impact specifics beyond what NVD list...

CVE-2001-0101

Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command...

CVE-2001-0101: Undefined Security Weakness

Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command...

[TL-Security-Announce] fetchmail-5.5.0-3.i386.rpm TLSA2000024-1

TurboLinux Security Announcement Package: fetchmail-5.5.0-2 and earlier Date: Wednesday December 27 5:00 PDT 2000 Affected TurboLinux versions:TL 6.1 WorkStation, All TurboLinux versions 6.0.5 and earlier TurboLinux Advisory ID: TLSA2000024-1 Credits: This bug was reported by Red Hat on November...

Linux news 27.11.00

Alan Cox: Linux kernel 2.4.0test11ac4 Список фиксов довольно внушительный. Интересно, они изменения эти в релиз 2.4.0 войдут? Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-25-001-04-NW-KN fetchmail 5.6.0 Вышла новая версия fetchmail - fetchmail 5.6.0. В данной версии обновлен FAQ и...

Linux news 5.07.00

Ядро 2.2.17pre10 В очередной pre версии стабильного ядра 2.2.17 Alan Cox добавил следующие патчи: обновлены драйвера, исправлена ошибка с eepro и cs46xx, обновлена документация. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Progress Software создает подразделение по...

Linux news 1.07.00

Linux Kernel pre-patch 2.4.0 test3-pre2 Вышла очередная предварительная, вторая по счету, версия третьего тестового ядра Linux - Linux Kernel pre-patch 2.4.0 test3-pre2. Подробнее: http://www.icewalk.com/softlib/app/app00797.html GPL будут тестировать юристы По мнению Д. Е. Поуэла Dennis E. Powel...

Linux news 11.04.00

Linuxconf 1.17r10 Вышла новая версия мощной утилиты конфигурирования Linux систем. Это т.н. bugfix release. Пофиксен баг в модуле pppdialin ошибка в ppplogin и в модуле inetdconf. Подробнее: http://www.appwatch.com Возрожденная Amiga строит мультимедийную Linux-платформу Gateway строила грандиозн...