Lucene search

RedhatCVE-2011-1947

HistoryJun 02, 2011 - 7:55 p.m.

CVE-2011-1947

2011-06-0219:55:03

CWE-399

redhat

web.nvd.nist.gov

cve-2011-1947

fetchmail

denial of service

starttls

stls

application hang

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.014

Percentile

86.5%

JSON

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.

Affected configurations

Nvd

Node

fetchmailfetchmailMatch5.9.9

fetchmailfetchmailMatch5.9.10

fetchmailfetchmailMatch5.9.11

fetchmailfetchmailMatch5.9.13

fetchmailfetchmailMatch6.0.0

fetchmailfetchmailMatch6.1.0

fetchmailfetchmailMatch6.1.3

fetchmailfetchmailMatch6.2.0

fetchmailfetchmailMatch6.2.1

fetchmailfetchmailMatch6.2.2

fetchmailfetchmailMatch6.2.3

fetchmailfetchmailMatch6.2.4

fetchmailfetchmailMatch6.2.5

fetchmailfetchmailMatch6.2.5.1

fetchmailfetchmailMatch6.2.5.2

fetchmailfetchmailMatch6.2.5.4

fetchmailfetchmailMatch6.2.6pre4

fetchmailfetchmailMatch6.2.6pre8

fetchmailfetchmailMatch6.2.6pre9

fetchmailfetchmailMatch6.2.9rc10

fetchmailfetchmailMatch6.2.9rc3

fetchmailfetchmailMatch6.2.9rc4

fetchmailfetchmailMatch6.2.9rc5

fetchmailfetchmailMatch6.2.9rc7

fetchmailfetchmailMatch6.2.9rc8

fetchmailfetchmailMatch6.2.9rc9

fetchmailfetchmailMatch6.3.0

fetchmailfetchmailMatch6.3.1

fetchmailfetchmailMatch6.3.2

fetchmailfetchmailMatch6.3.3

fetchmailfetchmailMatch6.3.4

fetchmailfetchmailMatch6.3.5

fetchmailfetchmailMatch6.3.6

fetchmailfetchmailMatch6.3.6rc1

fetchmailfetchmailMatch6.3.6rc2

fetchmailfetchmailMatch6.3.6rc3

fetchmailfetchmailMatch6.3.6rc4

fetchmailfetchmailMatch6.3.6rc5

fetchmailfetchmailMatch6.3.7

fetchmailfetchmailMatch6.3.8

fetchmailfetchmailMatch6.3.9

fetchmailfetchmailMatch6.3.9rc2

fetchmailfetchmailMatch6.3.10

fetchmailfetchmailMatch6.3.11

fetchmailfetchmailMatch6.3.12

fetchmailfetchmailMatch6.3.13

fetchmailfetchmailMatch6.3.14

fetchmailfetchmailMatch6.3.15

fetchmailfetchmailMatch6.3.16

fetchmailfetchmailMatch6.3.17

fetchmailfetchmailMatch6.3.18

fetchmailfetchmailMatch6.3.19

VendorProductVersionCPE
fetchmailfetchmail5.9.9cpe:2.3:a:fetchmail:fetchmail:5.9.9:*:*:*:*:*:*:*
fetchmailfetchmail5.9.10cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*
fetchmailfetchmail5.9.11cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*
fetchmailfetchmail5.9.13cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*
fetchmailfetchmail6.0.0cpe:2.3:a:fetchmail:fetchmail:6.0.0:*:*:*:*:*:*:*
fetchmailfetchmail6.1.0cpe:2.3:a:fetchmail:fetchmail:6.1.0:*:*:*:*:*:*:*
fetchmailfetchmail6.1.3cpe:2.3:a:fetchmail:fetchmail:6.1.3:*:*:*:*:*:*:*
fetchmailfetchmail6.2.0cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*
fetchmailfetchmail6.2.1cpe:2.3:a:fetchmail:fetchmail:6.2.1:*:*:*:*:*:*:*
fetchmailfetchmail6.2.2cpe:2.3:a:fetchmail:fetchmail:6.2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fetchmail	fetchmail	5.9.9	cpe:2.3:a:fetchmail:fetchmail:5.9.9:::::::*
fetchmail	fetchmail	5.9.10	cpe:2.3:a:fetchmail:fetchmail:5.9.10:::::::*
fetchmail	fetchmail	5.9.11	cpe:2.3:a:fetchmail:fetchmail:5.9.11:::::::*
fetchmail	fetchmail	5.9.13	cpe:2.3:a:fetchmail:fetchmail:5.9.13:::::::*
fetchmail	fetchmail	6.0.0	cpe:2.3:a:fetchmail:fetchmail:6.0.0:::::::*
fetchmail	fetchmail	6.1.0	cpe:2.3:a:fetchmail:fetchmail:6.1.0:::::::*
fetchmail	fetchmail	6.1.3	cpe:2.3:a:fetchmail:fetchmail:6.1.3:::::::*
fetchmail	fetchmail	6.2.0	cpe:2.3:a:fetchmail:fetchmail:6.2.0:::::::*
fetchmail	fetchmail	6.2.1	cpe:2.3:a:fetchmail:fetchmail:6.2.1:::::::*
fetchmail	fetchmail	6.2.2	cpe:2.3:a:fetchmail:fetchmail:6.2.2:::::::*