Lucene search
UbuntuUSN-233-1HistoryJan 03, 2006 - 12:00 a.m.
fetchmail vulnerability
2006-01-0300:00:00
ubuntu.com
45
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.3
Confidence
Low
EPSS
0.079
Percentile
94.3%
Releases
- Ubuntu 5.10
- Ubuntu 5.04
- Ubuntu 4.10
Details
Steve Fosdick discovered a remote Denial of Service vulnerability in
fetchmail. When using fetchmail in ‘multidrop’ mode, a malicious email
server could cause a crash by sending an email without any headers.
Since fetchmail is commonly called automatically (with cron, for
example), this crash could go unnoticed.
References
Related
openvas
openvas
Debian: Security Advisory (DSA-939-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 939-1 (fetchmail)
2008-01-17 00:00:00
FreeBSD Ports: fetchmail
2008-09-04 00:00:00
freebsd
freebsd
debian
debian
[SECURITY] [DSA 939-1] New fetchmail packages fix denial of service
2006-01-13 08:40:44
[SECURITY] [DSA 939-1] New fetchmail packages fix denial of service
2006-01-13 08:40:44
nessus
nessus
FreeBSD : fetchmail -- NULL pointer dereference in multidrop mode with headerless email (f7eb0b23-7099-11da-a15c-0060084a00e5)
2006-05-13 00:00:00
Mandrake Linux Security Advisory : fetchmail (MDKSA-2005:236)
2006-01-15 00:00:00
Ubuntu 4.10 / 5.04 / 5.10 : fetchmail vulnerability (USN-233-1)
2006-01-21 00:00:00
cvelist
cvelist
CVE-2005-4348
2005-12-21 00:00:00
ubuntucve
ubuntucve
CVE-2005-4348
2005-12-21 00:00:00
debiancve
debiancve
CVE-2005-4348
2005-12-21 00:03:00
cve
cve
CVE-2005-4348
2005-12-21 00:03:00
nvd
nvd
CVE-2005-4348
2005-12-21 00:03:00
centos
centos
fetchmail security update
2007-01-31 18:34:21
fetchmail, fetchmailconf security update
2007-01-31 22:51:28
redhat
redhat
(RHSA-2007:0018) Moderate: fetchmail security update
2007-01-31 00:00:00
slackware
slackware
[slackware-security] fetchmail
2006-02-15 00:26:01
oraclelinux
oraclelinux
Moderate: fetchmail security update
2007-02-01 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.3
Confidence
Low
EPSS
0.079
Percentile
94.3%
Related for USN-233-1