Security fix for the ALT Linux 6 package fetchmail version 6.3.8-alt4

Sept. 5, 2007 Michael Shigorin 6.3.8-alt4 - added patch from fetchmail-SA-2007-02 fixing CVE-2007-4565: NULL pointer dereference trigged by outside circumstances...

FreeBSD : fetchmail -- denial of service on reject of local warning message (45500f74-5947-11dc-87c1-000e2e5785ad)

Matthias Andree reports : fetchmail will generate warning messages in certain circumstances for instance, when leaving oversized messages on the server or login to the upstream fails and send them to the local postmaster or the user running it. If this warning message is then refused by the SMTP...

Fedora Core 6 : fetchmail-6.3.6-3.fc6 (2007-689)

Mon Sep 3 2007 Vitezslav Crhonek - 6.3.6-3 - Fix license - Fix fetchmail NULL pointer dereference CVE-2007-4565 Resolves: 260881 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

[SECURITY] Fedora 7 Update: fetchmail-6.3.7-2.fc7

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

[SECURITY] Fedora Core 6 Update: fetchmail-6.3.6-3.fc6

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

CVE-2007-4565

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...

CVE-2007-4565

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...

DEBIAN-CVE-2007-4565

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...

CVE-2007-4565

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...

Design/Logic Flaw

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...

CVE-2007-4565

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...

CVE-2007-4565

CVE-2007-4565 affects fetchmail: sink.c has a NULL dereference when warning messages are rejected by a remote SMTP server, causing denial of service. Public records in 2009 advisories (RHSA-2009:1427 and derivatives) indicate updated fetchmail packages fix multiple issues, including CVE-2007-4565...

CVE-2007-4565

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...

CVE-2007-4565: Undefined Security Weakness

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...

fetchmail -- denial of service on reject of local warning message

Matthias Andree reports: fetchmail will generate warning messages in certain circumstances for instance, when leaving oversized messages on the server or login to the upstream fails and send them to the local postmaster or the user running it. If this warning message is then refused by the SMTP...

fetchmail, fetchmailconf security update

CentOS Errata and Security Advisory CESA-2007:0385-01 An updated fetchmail package that fixes a security bug is now available for Red Hat Enterprise Linux 2.1, 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Fetchmail is a remote ma...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

Moderate: Red Hat Security Advisory: fetchmail security update

An updated fetchmail package that fixes a security bug is now available for Red Hat Enterprise Linux 2.1, 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Fetchmail is a remote mail retrieval and forwarding utility intended for use...

Moderate: fetchmail security update

6.2.5-6.0.1.el4 - Fix APOP vulnerability CVE-2007-1558 Resolves: 241197...

CentOS 3 / 4 / 5 : fetchmail (CESA-2007:0385)

An updated fetchmail package that fixes a security bug is now available for Red Hat Enterprise Linux 2.1, 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Fetchmail is a remote mail retrieval and forwarding utility intended for use...