Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fetchmail fetchmail 5.9.10 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2011-1947
fetchmail 5.9.9 up to and including 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.
Fetchmail Fetchmail 6.3.6Fetchmail Fetchmail 6.3.16Fetchmail Fetchmail 6.3.9Fetchmail Fetchmail 6.3.11Fetchmail Fetchmail 6.2.3Fetchmail Fetchmail 6.2.5Fetchmail Fetchmail 6.2.9Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 6.1.0Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 5.9.13Fetchmail Fetchmail 6.3.14Fetchmail Fetchmail 6.3.13Fetchmail Fetchmail 6.3.17Fetchmail Fetchmail 6.3.10Fetchmail Fetchmail 6.2.5.1Fetchmail Fetchmail 6.3.3Fetchmail Fetchmail 6.3.2Fetchmail Fetchmail 5.9.9Fetchmail Fetchmail 5.9.11Fetchmail Fetchmail 6.3.18Fetchmail Fetchmail 6.2.4
5
CVSSv2
CVE-2002-0146
fetchmail email client prior to 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
Fetchmail Fetchmail 5.8.5Fetchmail Fetchmail 5.8.3Fetchmail Fetchmail 5.7.0Fetchmail Fetchmail 5.5.6Fetchmail Fetchmail 5.5.3Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.3.3Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 5.1.4Fetchmail Fetchmail 5.0.3Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.4Fetchmail Fetchmail 4.7.2Fetchmail Fetchmail 4.6.5Fetchmail Fetchmail 4.6.3Fetchmail Fetchmail 4.5.5Fetchmail Fetchmail 4.5.3Fetchmail Fetchmail 5.7.4Fetchmail Fetchmail 5.4.0Fetchmail Fetchmail 5.8.11Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 5.6.0
7.5
CVSSv2
CVE-2002-1365
Heap-based buffer overflow in Fetchmail 6.1.3 and previous versions does not account for the "@" character when determining buffer lengths for local addresses, which allows remote malicious users to execute arbitrary code via a header with a large number of local addres...
Fetchmail Fetchmail 6.1.0Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.8.13Fetchmail Fetchmail 5.8.11Fetchmail Fetchmail 5.7.2Fetchmail Fetchmail 5.7.0Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 5.4.4Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 5.2.3Fetchmail Fetchmail 5.0.6Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.7.5Fetchmail Fetchmail 4.6.7Fetchmail Fetchmail 4.6.6Fetchmail Fetchmail 4.5.8Fetchmail Fetchmail 4.5.7Fetchmail Fetchmail 5.9.0Fetchmail Fetchmail 5.8.6Fetchmail Fetchmail 5.7.4Fetchmail Fetchmail 5.9.13
7.5
CVSSv2
CVE-2002-1174
Buffer overflows in Fetchmail 6.0.0 and previous versions allow remote malicious users to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readheaders function, or (2) via long Received: headers, which are not...
Fetchmail Fetchmail 5.8.13Fetchmail Fetchmail 5.8.11Fetchmail Fetchmail 5.7.2Fetchmail Fetchmail 5.7.0Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 5.4.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 5.2.3Fetchmail Fetchmail 5.0.6Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.7.5Fetchmail Fetchmail 4.7.4Fetchmail Fetchmail 4.6.7Fetchmail Fetchmail 4.6.6Fetchmail Fetchmail 4.5.8Fetchmail Fetchmail 4.5.7Fetchmail Fetchmail 5.8.6Fetchmail Fetchmail 5.7.4Fetchmail Fetchmail 5.9.13Fetchmail Fetchmail 5.9.11
5
CVSSv2
CVE-2002-1175
The getmxrecord function in Fetchmail 6.0.0 and previous versions does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote malicious users to cause a denial of service (crash) when Fetchmail attempts to read data b...
Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 5.9.8Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 5.8.3Fetchmail Fetchmail 5.5.5Fetchmail Fetchmail 5.5.3Fetchmail Fetchmail 5.3.3Fetchmail Fetchmail 5.3.1Fetchmail Fetchmail 5.2.0Fetchmail Fetchmail 5.1.4Fetchmail Fetchmail 5.0.2Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.2Fetchmail Fetchmail 4.7.1Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 4.6.3Fetchmail Fetchmail 4.5.4Fetchmail Fetchmail 4.5.3Fetchmail Fetchmail 5.4.0Fetchmail FetchmailFetchmail Fetchmail 5.9.13Fetchmail Fetchmail 5.9.11
5.8
CVSSv2
CVE-2012-3482
Fetchmail 5.0.8 up to and including 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder...
Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 5.2.7Fetchmail Fetchmail 5.2.8Fetchmail Fetchmail 5.4.4Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 5.7.0Fetchmail Fetchmail 5.7.2Fetchmail Fetchmail 5.8.2Fetchmail Fetchmail 5.8.3Fetchmail Fetchmail 5.9.13Fetchmail Fetchmail 5.9.4Fetchmail Fetchmail 6.3.14Fetchmail Fetchmail 6.3.13Fetchmail Fetchmail 6.3.6Fetchmail Fetchmail 6.2.9Fetchmail Fetchmail 6.2.6Fetchmail Fetchmail 6.3.7Fetchmail Fetchmail 6.3.5Fetchmail Fetchmail 6.3.4Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.1
5
CVSSv2
CVE-2003-0792
Fetchmail 6.2.4 and previous versions does not properly allocate memory for long lines, which allows remote malicious users to cause a denial of service (crash) via a certain email.
Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 5.9.5Fetchmail Fetchmail 5.9.4Fetchmail Fetchmail 5.8.1Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.5.2Fetchmail Fetchmail 5.5.0Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.2.8Fetchmail Fetchmail 5.0.8Fetchmail Fetchmail 5.0.7Fetchmail Fetchmail 5.0.0Fetchmail Fetchmail 4.7.7Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 4.6.9Fetchmail Fetchmail 4.6.1Fetchmail Fetchmail 4.6.0Fetchmail Fetchmail 4.5.2Fetchmail Fetchmail 4.5.1Fetchmail FetchmailFetchmail Fetchmail 6.1.0
6.4
CVSSv2
CVE-2009-2666
socket.c in fetchmail prior to 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle malicious users to spoof arbitrary SSL servers via a crafted certificate...
Fetchmail Fetchmail 6.3.5Fetchmail Fetchmail 6.3.3Fetchmail Fetchmail 6.2.5.4Fetchmail Fetchmail 6.2.6Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 6.1.0Fetchmail Fetchmail 5.9.4Fetchmail Fetchmail 5.8.14Fetchmail Fetchmail 5.8.13Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.7.2Fetchmail Fetchmail 5.5.0Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 5.2.7Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 5.0.7Fetchmail Fetchmail 5.0.6Fetchmail Fetchmail 4.7.7Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.8Fetchmail Fetchmail 4.6.7Fetchmail Fetchmail 4.6.0
5
CVSSv2
CVE-2007-4565
sink.c in fetchmail prior to 6.3.9 allows context-dependent malicious users to cause a denial of service (NULL dereference and application crash) by refusing certain warning messages that are sent over SMTP.
Fetchmail Fetchmail 6.2.5.2Fetchmail Fetchmail 6.3.2Fetchmail Fetchmail 6.3.1Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 5.9.5Fetchmail Fetchmail 5.9.4Fetchmail Fetchmail 5.8.2Fetchmail Fetchmail 5.8.1Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.5.2Fetchmail Fetchmail 5.5.0Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.2.8Fetchmail Fetchmail 5.1.0Fetchmail Fetchmail 5.0.8Fetchmail Fetchmail 5.0.7Fetchmail Fetchmail 5.0.0Fetchmail Fetchmail 4.7.7Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 4.6.9Fetchmail Fetchmail 4.6.1
4.3
CVSSv2
CVE-2008-2711
fetchmail 6.3.8 and previous versions, when running in -v -v (aka verbose) mode, allows remote malicious users to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnpr...
Fetchmail Fetchmail 6.3.5Fetchmail Fetchmail 6.3.3Fetchmail Fetchmail 6.2.5.4Fetchmail Fetchmail 6.2.6Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 6.1.0Fetchmail Fetchmail 5.9.4Fetchmail Fetchmail 5.8.14Fetchmail Fetchmail 5.8.13Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.7.2Fetchmail Fetchmail 5.5.0Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 5.2.7Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 5.0.7Fetchmail Fetchmail 5.0.6Fetchmail Fetchmail 4.7.7Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.8Fetchmail Fetchmail 4.6.7Fetchmail Fetchmail 4.6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook