Debian Security Advisory DSA 900-1 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory DSA 900-1. Thomas Wolff discovered that the fetchmailconfig program which is provided as part of fetchmail, an SSL enabled POP3, APOP, IMAP mail gatherer/forwarder, creates the new configuration in an insecure fashion that c...

Debian: Security Advisory (DSA-1259-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1259-1 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory DSA 1259-1. Isaac Wilcox discovered that fetchmail, a popular mail retrieval and forwarding utility, insufficiently enforces encryption of connections, which might lead to information disclosure. OpenVAS Vulnerability Test...

SuSE 10 Security Update : fetchmail (ZYPP Patch Number 4462)

This update fixes a remote denial-of-service attack. CVE-2007-4565 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29426; scriptversion"1.16";...

SuSE 10 Security Update : fetchmail (ZYPP Patch Number 2608)

Three security issues have been fixed in fetchmail : - fetchmail when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers. CVE-2005-4348 - fetchmail did not properly enforce TLS and ma...

Ubuntu 5.10 / 6.06 LTS / 6.10 : fetchmail vulnerability (USN-405-1)

It was discovered that fetchmail did not correctly require TLS negotiation in certain situations. This would result in a user's unencrypted password being sent across the network. If fetchmail has been configured to use the 'sslproto tls1', 'sslcertck', or 'sslfingerprint' options with a server...

Ubuntu 6.06 LTS / 6.10 / 7.04 : fetchmail vulnerabilities (USN-520-1)

Gaetan Leurent discovered a vulnerability in the APOP protocol based on MD5 collisions. As fetchmail supports the APOP protocol, this vulnerability can be used by attackers to discover a portion of the APOP user's authentication credentials. CVE-2007-1558 Earl Chew discovered that fetchmail can b...

Fedora 7 : fetchmail-6.3.7-2.fc7 (2007-1983)

Mon Sep 3 2007 Vitezslav Crhonek - 6.3.7-2 - Fix license - Fix fetchmail NULL pointer dereference CVE-2007-4565 Resolves: 260861 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

openSUSE 10 Security Update : fetchmail (fetchmail-4490)

This update fixes a remote denial-of-service attack. CVE-2007-4565 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update fetchmail-4490. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : fetchmail (fetchmail-2602)

Three security issues have been fixed in fetchmail : CVE-2005-4348: fetchmail when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers. CVE-2006-5867: fetchmail did not properly enforc...

USN-520-1: fetchmail vulnerabilities

Gaetan Leurent discovered a vulnerability in the APOP protocol based on MD5 collisions. As fetchmail supports the APOP protocol, this vulnerability can be used by attackers to discover a portion of the APOP user's authentication credentials. CVE-2007-1558 Earl Chew discovered that fetchmail can b...

Debian DSA-1377-2 : fetchmail - NULL pointer dereference

Matthias Andree discovered that fetchmail, an SSL enabled POP3, APOP and IMAP mail gatherer/forwarder, can under certain circumstances attempt to dereference a NULL pointer and crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 1377-2] New fetchmail packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1377-2 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1377-1] New fetchmail packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1377 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...

DSA-1377-2 fetchmail - null pointer dereference

Bulletin has no description...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2007:179)

A vulnerability in fetchmail was found where it could crash when attempting to deliver an internal warning or error message through an untrusted or compromised SMTP server, leading to a denial of service. Updated packages have been patched to prevent these issues. %NASLMINLEVEL 70300 C Tenable...

rPSA-2007-0178-1 fetchmail

rPath Security Advisory: 2007-0178-1 Published: 2007-09-05 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Non-deterministic Denial of Service Updated Versions: fetchmail=/conary.rpath.com@rpl:devel//1/6.3.8-0.3-1 References: https://vulners.com/cve/CVE-2007-456...

Fetchmail mail delivery DoS

DoS on delivering mail report thorugh SMTP server...

Fetchmail无效警告消息本地拒绝服务漏洞

BUGTRAQ ID: 25495 CVECAN ID: CVE-2007-4565 Fetchmail是免费的软件包，可以从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传送代理。...

Security fix for the ALT Linux 6 package fetchmail version 6.3.8-alt4

Sept. 5, 2007 Michael Shigorin 6.3.8-alt4 - added patch from fetchmail-SA-2007-02 fixing CVE-2007-4565: NULL pointer dereference trigged by outside circumstances...