PT-2006-6537 · Fetchmail+1 · Fetchmail+1

Isaac Wilcox · Publicado 2006-12-31 · Atualizado 2024-06-15 · CVE-2006-5867

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions fetchmail versions prior to 6.3.6-rc4

Description The issue allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks because it does not properly enforce TLS, potentially transmitting cleartext passwords over unsecured links under certain circumstances.

Recommendations For versions prior to 6.3.6-rc4, update to version 6.3.6-rc4 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-5867

DSA-1259-1

OPENSUSE-SU-2024:10753-1

RHSA-2007:0018

RHSA-2007_0018

Produtos afetados

Red Hat

Fetchmail

Referências · 51

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10566 · Nota
• https://suse.com/security/cve/CVE-2006-0321 · Nota
• https://suse.com/security/cve/CVE-2007-4565 · Nota
• http://securityfocus.com/archive/1/460528/100/0/threaded · Nota
• http://securityfocus.com/archive/1/456115/100/0/threaded · Nota
• https://access.redhat.com/security/cve/CVE-2005-4348 · Nota
• http://secunia.com/advisories/23781 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200701-13.xml · Aviso do Fabricante
• http://fetchmail.berlios.de/fetchmail-SA-2006-02.txt · Nota
• http://vupen.com/english/advisories/2007/1470 · Nota
• http://securitytracker.com/id?1017478 · Nota
• https://suse.com/security/cve/CVE-2021-36386 · Nota
• http://ubuntu.com/usn/usn-405-1 · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/0088 · Nota