Lucene search

K
redhatRedHatRHSA-2007:0385
HistoryJun 07, 2007 - 12:00 a.m.

(RHSA-2007:0385) Moderate: fetchmail security update

2007-06-0700:00:00
access.redhat.com
18

EPSS

0.088

Percentile

94.6%

Fetchmail is a remote mail retrieval and forwarding utility intended
for use over on-demand TCP/IP links, like SLIP or PPP connections.

A flaw was found in the way fetchmail processed certain APOP authentication
requests. By sending certain responses when fetchmail attempted to
authenticate against an APOP server, a remote attacker could potentially
acquire certain portions of a user’s authentication credentials.
(CVE-2007-1558)

All users of fetchmail should upgrade to this updated package, which
contains a backported patch to correct this issue.