Description
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html ↗
- http://www.securityfocus.com/bid/14349 ↗
- http://www.novell.com/linux/security/advisories/2005_18_sr.html ↗
- http://www.vupen.com/english/advisories/2006/3101 ↗
- http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html ↗
- http://www.vupen.com/english/advisories/2005/1171 ↗
- http://secunia.com/advisories/21253 ↗
- http://www.securityfocus.com/bid/19289 ↗
- http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt ↗
- http://www.osvdb.org/18174 ↗
- http://www.us-cert.gov/cas/techalerts/TA06-214A.html ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1124 ↗
- http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00088.html ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1038 ↗
- http://developer.berlios.de/project/shownotes.php?release_id=6617 ↗
- http://www.securityfocus.com/archive/1/441856/100/200/threaded ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8833 ↗
- http://www.debian.org/security/2005/dsa-774 ↗
- http://www.redhat.com/support/errata/RHSA-2005-640.html ↗
- http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00089.html ↗
- http://www.securityfocus.com/archive/1/435197/100/0/threaded ↗
- http://secunia.com/advisories/16176 ↗