Lucene search

K
ubuntuUbuntuUSN-233-1
HistoryJan 03, 2006 - 12:00 a.m.

fetchmail vulnerability

2006-01-0300:00:00
ubuntu.com
41

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

Low

0.079 Low

EPSS

Percentile

94.3%

Releases

  • Ubuntu 5.10
  • Ubuntu 5.04
  • Ubuntu 4.10

Details

Steve Fosdick discovered a remote Denial of Service vulnerability in
fetchmail. When using fetchmail in ‘multidrop’ mode, a malicious email
server could cause a crash by sending an email without any headers.
Since fetchmail is commonly called automatically (with cron, for
example), this crash could go unnoticed.

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

Low

0.079 Low

EPSS

Percentile

94.3%