Lucene search
Ubuntu.comUB:CVE-2008-2711HistoryJun 16, 2008 - 12:00 a.m.
CVE-2008-2711
2008-06-1600:00:00
ubuntu.com
ubuntu.com
12
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.105 Low
EPSS
Percentile
94.9%
fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode,
allows remote attackers to cause a denial of service (crash and persistent
mail failure) via a malformed mail message with long headers, which
triggers an erroneous dereference when using vsnprintf to format log
messages.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | per Debian, http://www.openwall.com/lists/oss-security/2008/06/13/1, -vv is only used for debugging purposes so this does not prevent a victim from getting mails. -vv is not used in non-interactive use. |
Related
openvas
openvas
Slackware Advisory SSA:2008-210-01 fetchmail
2012-09-11 00:00:00
Mandriva Update for fetchmail MDVSA-2008:117 (fetchmail)
2009-04-09 00:00:00
FreeBSD Ports: fetchmail
2008-09-04 00:00:00
nessus
nessus
debiancve
debiancve
CVE-2008-2711
2008-06-16 21:41:00
fedora
fedora
[SECURITY] Fedora 9 Update: fetchmail-6.3.8-7.fc9
2008-06-28 22:15:01
[SECURITY] Fedora 8 Update: fetchmail-6.3.8-4.fc8
2008-06-28 22:15:22
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:36:12
cve
cve
CVE-2008-2711
2008-06-16 21:41:00
freebsd
freebsd
fetchmail -- potential crash in -v -v verbose mode (revised patch)
2008-06-24 00:00:00
fetchmail -- potential crash in -v -v verbose mode
2008-06-13 00:00:00
fetchmail -- 6.4.19 and older denial of service or information disclosure
2021-07-07 00:00:00
prion
prion
Format string
2008-06-16 21:41:00
seebug
seebug
Fetchmail Verbose樑εΌθΆ
倧ζ₯εΏζΆζ―θΏη¨ζη»ζε‘ζΌζ΄
2008-06-20 00:00:00
securityvulns
securityvulns
fetchmail security announcement fetchmail-SA-2008-01 (CVE-2008-2711)
2008-06-17 00:00:00
fetchmail multiple security vulnerabilities
2008-06-17 00:00:00
slackware
slackware
[slackware-security] fetchmail
2008-07-29 05:31:09
altlinux
altlinux
Security fix for the ALT Linux 6 package fetchmail version 6.3.9-alt1
2008-12-01 00:00:00
Security fix for the ALT Linux 5 package fetchmail version 6.3.9-alt1
2008-12-01 00:00:00
redhatcve
redhatcve
CVE-2021-36386
2021-07-29 16:20:37
redhat
redhat
(RHSA-2009:1427) Moderate: fetchmail security update
2009-09-08 00:00:00
centos
centos
fetchmail security update
2009-09-08 17:07:54
oraclelinux
oraclelinux
fetchmail security update
2009-09-09 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.105 Low
EPSS
Percentile
94.9%
Related for UB:CVE-2008-2711