CVE-2005-4348 fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstrea...
HighCVSS 7.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fetchmail | >= 6.2.0, < 6.2.5.5 | 6.2.5.5 |
| fetchmail | >= 6.3.0, < 6.3.1 | 6.3.1 |
| debian/fetchmail(Debian:12) | < 6.3.1-1 | 6.3.1-1 |
| debian/fetchmail(Debian:13) | < 6.3.1-1 | 6.3.1-1 |
| debian/fetchmail(Debian:14) | < 6.3.1-1 | 6.3.1-1 |
References
- bugs.debian.org issue-tracking mailing-list third-party-advisory
- fetchmail.berlios.de broken-link
- 17891 third-party-advisory
- 18172 third-party-advisory
- 18231 third-party-advisory
- 18266 third-party-advisory
- 18433 third-party-advisory
- 18463 third-party-advisory
- 18895 third-party-advisory
- 21253 third-party-advisory
- 24007 third-party-advisory
- 24284 third-party-advisory
- 1015383 third-party-advisory vdb-entry
- SSA:2006-045-01 third-party-advisory vendor-advisory
- DSA-939 third-party-advisory vendor-advisory
- SUSE-SR:2007:004 broken-link vendor-advisory
- 21906 broken-link vdb-entry
- RHSA-2007:0018 third-party-advisory vendor-advisory
- 20051221 fetchmail security announcement fetchmail-SA-2005-03 (CVE-2005-4348) mailing-list
- 20060526 rPSA-2006-0084-1 fetchmail mailing-list
- 15987 third-party-advisory vdb-entry
- 19289 third-party-advisory vdb-entry
- 2006-0002 broken-link vendor-advisory
- ADV-2005-2996 permissions-required third-party-advisory vdb-entry
- ADV-2006-3101 permissions-required third-party-advisory vdb-entry
- MDKSA-2005:236 third-party-advisory vendor-advisory
- fetchmail-null-pointer-dos(23713) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:9659 signature third-party-advisory vdb-entry
- USN-233-1 vendor-advisory
- Debian Security Tracker CVE-2005-4348 vendor-advisory
- bugs.debian.org issue-tracking