Lucene search

K
freebsdFreeBSD45500F74-5947-11DC-87C1-000E2E5785AD
HistoryJul 29, 2007 - 12:00 a.m.

fetchmail -- denial of service on reject of local warning message

2007-07-2900:00:00
vuxml.freebsd.org
25

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.055

Percentile

93.3%

Matthias Andree reports:

fetchmail will generate warning messages in certain
circumstances (for instance, when leaving oversized messages
on the server or login to the upstream fails) and send them
to the local postmaster or the user running it.
If this warning message is then refused by the SMTP listener
that fetchmail is forwarding the message to, fetchmail
crashes and does not collect further messages until it is
restarted.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfetchmail=Β 4.6.8UNKNOWN
FreeBSDanynoarchfetchmail<Β 6.3.8_4UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.055

Percentile

93.3%