fetchmail -- denial-of-service vulnerability

Dave Jones discovered a denial-of-service vulnerability in fetchmail. An email message containing a very long line could cause fetchmail to segfault due to missing NUL termination in transact.c. Eric Raymond decided not to mention this issue in the release notes for fetchmail 6.2.5, but it was...

Critical: Red Hat Security Advisory: : : : Updated Fetchmail packages fix security vulnerabilities

Updated Fetchmail packages that close a number of vulnerabilities are available for Red Hat Linux on IBM iSeries and pSeries systems. Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links such as SLIP and PPP connections. Three bugs have been fou...

CVE-2002-0146

CVE-2002-0146 affects fetchmail prior to 5.9.10. The flaw arises when fetching mail over IMAP: fetchmail allocates an array for message sizes based on the server-reported message count but does not validate that count, allowing a remote IMAP server to cause memory overrun/out-of-bounds writes. Ma...

CVE-2001-1378

fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files...

CVE-2002-0146

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...

CVE-2001-1378

The CVE-2001-1378 issue affects fetchmailconf in fetchmail prior to 5.7.4, where a symlink attack on temporary files allows local users to overwrite files owned by other users. The root cause is improper handling of temporary files during configuration, enabling a local, non-privileged user to le...

CVE-2002-0146: Improper Input Validation

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...

CVE-2001-1378: Improper Link Resolution Before File Access

fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files...

[SECURITY] [DSA 216-1] New fetchmail packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 216-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 216-1] New fetchmail packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 216-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2002 http://www.debian.org/security/faq -...

DSA-216 fetchmail - buffer overflow

Bulletin has no description...

CVE-2002-1365

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses...

CVE-2002-1365

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses...

DEBIAN-CVE-2002-1365

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses...

Critical: Red Hat Security Advisory: fetchmail security update

Updated Fetchmail packages are available for Red Hat Linux Advanced Server which close a remotely-exploitable vulnerability in unpatched versions of Fetchmail prior to 6.2.0. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation Fetchmail is a remote mail retrieval and forwarding...

Critical: Red Hat Security Advisory: : Updated Fetchmail packages fix security vulnerability

Updated Fetchmail packages are available for Red Hat Linux versions 6.2, 7, 7.1, 7.2, 7.3, and 8.0 which close a remotely-exploitable vulnerability in unpatched versions of Fetchmail prior to 6.2.0. Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP...

Advisory 05/2002: Another Fetchmail Remote Vulnerability

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Fetchmail remote vulnerability Release Date: 2002/12/13 Last Modified: 2002/12/13 Author: Stefan Esser [email protected] Application: Fetchmail = 6.1.3 Severity: A vulnerability within Fetchmail could allow remote compromise...

Buffer overflows in fetchmail

Buffer overflows on addresses parsing...

CVE-2002-1174

Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 long headers that are not properly processed by the readheaders function, or 2 via long Received: headers, which are not properly parsed by the parsereceived...

DEBIAN-CVE-2002-1174

Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 long headers that are not properly processed by the readheaders function, or 2 via long Received: headers, which are not properly parsed by the parsereceived...