PT-2001-1988 · Fetchmail · Fetchmail

Publicado 2001-12-06 · Atualizado 2017-10-10 · CVE-2001-0819

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions fetchmail versions prior to 5.8.6

Description A buffer overflow issue allows remote attackers to execute arbitrary code via a large 'To:' field in an email header.

Recommendations For versions prior to 5.8.6, update to version 5.8.6 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2001-0819

Produtos afetados

Fetchmail

Referências · 12

• http://redhat.com/support/errata/RHSA-2001-103.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0819 · Nota de Segurança
• http://linuxsecurity.com/advisories/other_advisory-1451.html · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2001_026_fetchmail_txt.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6704 · Nota
• http://debian.org/security/2001/dsa-060 · Aviso do Fabricante
• http://caldera.com/support/security/advisories/CSSA-2001-022.1.txt · Aviso do Fabricante
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-063.php3?dis=7.1 · Aviso do Fabricante
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-025-01 · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000403 · Aviso do Fabricante
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:43.fetchmail.asc · Aviso do Fabricante
• http://securityfocus.com/bid/2877 · Aviso do Fabricante