Description
fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html ↗
- http://www.securityfocus.com/bid/16365 ↗
- http://developer.berlios.de/project/shownotes.php?release_id=8784 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24265 ↗
- http://www.securityfocus.com/archive/1/422936/100/0/threaded ↗
- http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt ↗
- http://www.vupen.com/english/advisories/2006/3101 ↗
- http://secunia.com/advisories/21253 ↗
- http://secunia.com/advisories/18571 ↗
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499 ↗
- http://www.vupen.com/english/advisories/2006/0300 ↗
- http://www.securityfocus.com/bid/19289 ↗
- http://www.us-cert.gov/cas/techalerts/TA06-214A.html ↗
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747 ↗
- http://www.osvdb.org/22691 ↗
- http://securitytracker.com/id?1015527 ↗
- http://secunia.com/advisories/18895 ↗