Published: 31/08/2001 Updated: 16/02/2011

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Fetchmail (aka fetchmail-ssl) prior to 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fetchmail fetchmail 5.8.13
fetchmail fetchmail 5.8.11
fetchmail fetchmail 5.8.5
fetchmail fetchmail 5.8.4
fetchmail fetchmail 5.4.4
fetchmail fetchmail 5.4.3
fetchmail fetchmail 5.3.8
fetchmail fetchmail 5.3.3
fetchmail fetchmail 5.0.6
fetchmail fetchmail 5.0.5
fetchmail fetchmail 5.0.4
fetchmail fetchmail 5.8.2
fetchmail fetchmail 5.8
fetchmail fetchmail 5.5.2
fetchmail fetchmail 5.4.5
fetchmail fetchmail 5.3.1
fetchmail fetchmail 5.2.8
fetchmail fetchmail 5.1.0
fetchmail fetchmail 5.0.7
fetchmail fetchmail 5.0.0
fetchmail fetchmail 4.7.6
fetchmail fetchmail 4.7.1
fetchmail fetchmail 4.6.9
fetchmail fetchmail 4.6.2
fetchmail fetchmail 4.6.0
fetchmail fetchmail 4.5.2
fetchmail fetchmail 5.9.0
fetchmail fetchmail 5.8.3
fetchmail fetchmail 5.8.1
fetchmail fetchmail 5.5.3
fetchmail fetchmail 5.5.0
fetchmail fetchmail 5.3.0
fetchmail fetchmail 5.2.7
fetchmail fetchmail 5.1.4
fetchmail fetchmail 5.0.8
fetchmail fetchmail 5.0.1
fetchmail fetchmail 4.7.7
fetchmail fetchmail 4.7.0
fetchmail fetchmail 4.6.8
fetchmail fetchmail 4.6.3
fetchmail fetchmail 4.6.1
fetchmail fetchmail 4.5.3
fetchmail fetchmail 4.5.1
fetchmail fetchmail 5.7.2
fetchmail fetchmail 5.7.0
fetchmail fetchmail 5.6.0
fetchmail fetchmail 5.5.6
fetchmail fetchmail 5.5.5
fetchmail fetchmail 5.2.4
fetchmail fetchmail 5.2.3
fetchmail fetchmail 5.2.1
fetchmail fetchmail 5.2.0
fetchmail fetchmail 4.7.5
fetchmail fetchmail 4.7.4
fetchmail fetchmail 4.7.3
fetchmail fetchmail 4.7.2
fetchmail fetchmail 4.5.8
fetchmail fetchmail 4.5.7
fetchmail fetchmail 4.5.6
fetchmail fetchmail 4.5.5
fetchmail fetchmail 4.5.4
fetchmail fetchmail 5.0.3
fetchmail fetchmail 5.0.2
fetchmail fetchmail 4.6.7
fetchmail fetchmail 4.6.6
fetchmail fetchmail 4.6.5
fetchmail fetchmail 4.6.4
fetchmail fetchmail 5.8.6
fetchmail fetchmail 5.7.4
fetchmail fetchmail 5.4.0
fetchmail fetchmail

source: wwwsecurityfocuscom/bid/3166/info Fetchmail is a unix utility for downloading email from mail servers via POP3 and IMAP Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems The vulnerability has to do with the use of a remotely supplied signed integer value as the index to an a ...

source: wwwsecurityfocuscom/bid/3164/info Fetchmail is a unix utility for downloading email from mail servers via POP3 Fetchmail contains a vulnerability that may allow for remote attackers to gain access to client systems The vulnerability has to do with the use of a remotely supplied signed integer value as the index to an array when ...

CWE-264 http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html http://www.securityfocus.com/bid/3166 http://www.securityfocus.com/bid/3164 http://www.linuxsecurity.com/advisories/other_advisory-1555.html http://www.redhat.com/support/errata/RHSA-2001-103.html http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-072.php3 http://www.debian.org/security/2001/dsa-071 http://www.novell.com/linux/security/advisories/2001_026_fetchmail_txt.html http://www.iss.net/security_center/static/6965.php http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419 https://nvd.nist.gov https://www.exploit-db.com/exploits/21066/

CVE-2001-1009

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect