Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

fetchmail fetchmail 5.8.17 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2012-3482

Fetchmail 5.0.8 up to and including 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder...
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 5.8Fetchmail Fetchmail 6.3.5Fetchmail Fetchmail 6.3.7Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 6.3.14Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 5.8.11Fetchmail Fetchmail 6.2.5.1Fetchmail Fetchmail 5.9.8Fetchmail Fetchmail 6.3.12Fetchmail Fetchmail 5.5.6Fetchmail Fetchmail 5.8.2Fetchmail Fetchmail 5.8.17
NA

CVE-2010-1167

fetchmail 4.6.3 up to and including 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote malicious users to cause a denial of service (memory consumption and application crash) via a crafted (1) message h...
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.3Fetchmail Fetchmail 6.3.5Fetchmail FetchmailFetchmail Fetchmail 6.3.7Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 6.3.14Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10
NA

CVE-2009-2666

socket.c in fetchmail prior to 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle malicious users to spoof arbitrary SSL servers via a crafted certificate...
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.3Fetchmail Fetchmail 6.3.5Fetchmail Fetchmail 6.3.7Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 4.5.2Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 4.7.4
NA

CVE-2008-2711

fetchmail 6.3.8 and previous versions, when running in -v -v (aka verbose) mode, allows remote malicious users to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnpr...
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.3Fetchmail Fetchmail 6.3.5Fetchmail Fetchmail 6.3.7Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 4.5.2Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 4.7.4
NA

CVE-2007-4565

sink.c in fetchmail prior to 6.3.9 allows context-dependent malicious users to cause a denial of service (NULL dereference and application crash) by refusing certain warning messages that are sent over SMTP.
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.3Fetchmail Fetchmail 6.3.5Fetchmail FetchmailFetchmail Fetchmail 6.3.7Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 4.5.2Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10
NA

CVE-2006-5867

fetchmail prior to 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote malicious users to obtain sensitive information via man-in-the-middle (MITM) attacks.
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.3Fetchmail Fetchmail 6.3.5Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 4.5.2Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 4.7.4Fetchmail Fetchmail 5.8.11
NA

CVE-2005-2335

Buffer overflow in the POP3 client in Fetchmail prior to 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. Th...
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.3Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 4.5.2Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 4.7.4Fetchmail Fetchmail 5.8.11Fetchmail Fetchmail 4.6.8
NA

CVE-2003-0792

Fetchmail 6.2.4 and previous versions does not properly allocate memory for long lines, which allows remote malicious users to cause a denial of service (crash) via a certain email.
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.3Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 4.5.2Fetchmail Fetchmail 6.2.0Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 6.2.1Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 4.7.4Fetchmail Fetchmail 5.8.11Fetchmail Fetchmail 4.6.8
NA

CVE-2002-1365

Heap-based buffer overflow in Fetchmail 6.1.3 and previous versions does not account for the "@" character when determining buffer lengths for local addresses, which allows remote malicious users to execute arbitrary code via a header with a large number of local addres...
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.3Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 4.5.2Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 6.0.0Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 4.7.4Fetchmail Fetchmail 5.8.11Fetchmail Fetchmail 4.6.8Fetchmail Fetchmail 5.9.8Fetchmail Fetchmail 5.5.6
NA

CVE-2002-1174

Buffer overflows in Fetchmail 6.0.0 and previous versions allow remote malicious users to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readheaders function, or (2) via long Received: headers, which are not...
Fetchmail Fetchmail 5.6.0Fetchmail Fetchmail 5.2.1Fetchmail Fetchmail 4.7.6Fetchmail Fetchmail 4.6.4Fetchmail Fetchmail 5.4.3Fetchmail Fetchmail 5.8.4Fetchmail Fetchmail 4.7.0Fetchmail Fetchmail 5.8Fetchmail Fetchmail 5.0.1Fetchmail Fetchmail 4.7.3Fetchmail Fetchmail 5.4.5Fetchmail Fetchmail 4.5.2Fetchmail Fetchmail 5.0.5Fetchmail Fetchmail 5.2.4Fetchmail Fetchmail 5.3.0Fetchmail Fetchmail 5.9.10Fetchmail Fetchmail 4.7.4Fetchmail Fetchmail 5.8.11Fetchmail Fetchmail 4.6.8Fetchmail Fetchmail 5.9.8Fetchmail Fetchmail 5.5.6Fetchmail Fetchmail 5.8.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook