PT-2002-1232 · Fetchmail · Fetchmail

Publicado 2002-06-25 · Atualizado 2011-02-15 · CVE-2002-0146

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions fetchmail versions prior to 5.9.10

Description The issue concerns the fetchmail email client, which does not properly limit the maximum number of messages available. This allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.

Recommendations For versions prior to 5.9.10, update to version 5.9.10 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2002-0146

Produtos afetados

Fetchmail

Referências · 7

• http://redhat.com/support/errata/RHSA-2002-047.html · Aviso do Fabricante
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-027.0.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0146 · Nota de Segurança
• http://linux-mandrake.com/en/security/2002/MDKSA-2002-036.php · Aviso do Fabricante
• http://iss.net/security_center/static/9133.php · Nota
• http://securityfocus.com/bid/4788 · Nota
• http://online.securityfocus.com/advisories/4145 · Aviso do Fabricante