PT-2006-1394 · Fetchmail · Fetchmail

Nathaniel W. Turner · Publicado 2006-01-24 · Atualizado 2024-06-15 · CVE-2006-0321

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions fetchmail versions prior to 6.3.2

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending crafted e-mail messages. When fetchmail attempts to bounce the message to the originator or local postmaster, it frees an invalid pointer, leading to the crash.

Recommendations For versions prior to 6.3.2, update to version 6.3.2 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-0321

OPENSUSE-SU-2024:10753-1

Produtos afetados

Fetchmail

Referências · 28

• https://suse.com/security/cve/CVE-2007-1558 · Nota
• https://suse.com/security/cve/CVE-2006-0321 · Nota
• https://suse.com/security/cve/CVE-2007-4565 · Nota
• http://securityfocus.com/bid/16365 · Nota
• http://secunia.com/advisories/18895 · Aviso do Fabricante
• http://securityfocus.com/bid/19289 · Nota
• https://osv.dev/vulnerability/CVE-2006-0321 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-36386 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0321 · Nota de Segurança
• http://securityfocus.com/archive/1/422936/100/0/threaded · Nota
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24265 · Nota
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-5867 · Nota
• http://vupen.com/english/advisories/2006/3101 · Nota