Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-3088HistoryOct 27, 2005 - 10:02 a.m.
CVE-2005-3088
2005-10-2710:02:00
Debian Security Bug Tracker
security-tracker.debian.org
11
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.001
Percentile
36.7%
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | fetchmail | < 6.2.5.4-1 | fetchmail_6.2.5.4-1_all.deb |
| Debian | 11 | all | fetchmail | < 6.2.5.4-1 | fetchmail_6.2.5.4-1_all.deb |
| Debian | 999 | all | fetchmail | < 6.2.5.4-1 | fetchmail_6.2.5.4-1_all.deb |
| Debian | 13 | all | fetchmail | < 6.2.5.4-1 | fetchmail_6.2.5.4-1_all.deb |
Related
openvas
openvas
Debian: Security Advisory (DSA-900-3)
2008-01-17 00:00:00
Debian Security Advisory DSA 900-1 (fetchmail)
2008-01-17 00:00:00
Debian Security Advisory DSA 900-2 (fetchmail)
2008-01-17 00:00:00
ubuntucve
ubuntucve
CVE-2005-3088
2005-10-27 00:00:00
nessus
nessus
FreeBSD : fetchmail -- fetchmailconf local password exposure (baf74e0b-497a-11da-a4f4-0060084a00e5)
2006-05-13 00:00:00
Ubuntu 4.10 / 5.04 / 5.10 : fetchmail vulnerability (USN-215-1)
2006-01-15 00:00:00
RHEL 2.1 : fetchmail (RHSA-2005:823)
2005-10-28 00:00:00
ubuntu
ubuntu
fetchmailconf vulnerability
2005-11-08 00:00:00
debian
debian
freebsd
freebsd
fetchmail -- fetchmailconf local password exposure
2005-10-21 00:00:00
cvelist
cvelist
CVE-2005-3088
2005-10-27 04:00:00
nvd
nvd
CVE-2005-3088
2005-10-27 10:02:00
centos
centos
fetchmail, fetchmailconf security update
2005-10-28 03:32:26
redhat
redhat
(RHSA-2005:823) fetchmail security update
2005-10-26 00:00:00
securityvulns
securityvulns
fetchmail security announcement 2005-02 (CVE-2005-3088)
2005-10-28 00:00:00
gentoo
gentoo
fetchmail: Password exposure in fetchmailconf
2005-11-06 00:00:00
cve
cve
CVE-2005-3088
2005-10-27 10:02:00
slackware
slackware
[slackware-security] fetchmail
2006-02-15 00:26:01
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.001
Percentile
36.7%
Related for DEBIANCVE:CVE-2005-3088