PT-2005-3918 · Fetchmail · Fetchmail+1

Thomas Wolff · Publicado 2005-10-27 · Atualizado 2018-10-03 · CVE-2005-3088

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions fetchmail versions 6.2.0 through 6.2.5.2

Description The issue allows local users to obtain sensitive information, such as passwords, due to configuration files being created with insecure world-readable permissions by fetchmailconf before version 1.49.

Recommendations For fetchmail versions 6.2.0 through 6.2.5.2, update fetchmailconf to version 1.49 or later to ensure configuration files are created with secure permissions.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2005-3088

DSA-900-3

Produtos afetados

Fetchmail

Fetchmailconf

Referências · 28

• http://vupen.com/english/advisories/2005/2182 · Nota
• http://redhat.com/support/errata/RHSA-2005-823.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-3088 · Aviso do Fabricante
• https://usn.ubuntu.com/215-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-3088 · Aviso do Fabricante
• http://osvdb.org/20267 · Nota
• http://secunia.com/advisories/18895 · Aviso do Fabricante
• http://securitytracker.com/id?1015114 · Nota
• http://securityfocus.com/bid/19289 · Nota
• http://secunia.com/advisories/17349 · Aviso do Fabricante
• http://secunia.com/advisories/17495 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200511-06.xml · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-3088 · Aviso do Fabricante
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499 · Aviso do Fabricante
• http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt · Aviso do Fabricante