PT-2001-1988 · Fetchmail · Fetchmail

Published 2001-12-06 · Updated 2017-10-10 · CVE-2001-0819

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions fetchmail versions prior to 5.8.6

Description A buffer overflow issue allows remote attackers to execute arbitrary code via a large 'To:' field in an email header.

Recommendations For versions prior to 5.8.6, update to version 5.8.6 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2001-0819

Affected Products

Fetchmail

References · 12

• http://redhat.com/support/errata/RHSA-2001-103.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0819 · Security Note
• http://linuxsecurity.com/advisories/other_advisory-1451.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2001_026_fetchmail_txt.html · Vendor Advisory
• http://debian.org/security/2001/dsa-060 · Vendor Advisory
• http://caldera.com/support/security/advisories/CSSA-2001-022.1.txt · Vendor Advisory
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-063.php3?dis=7.1 · Vendor Advisory
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-025-01 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000403 · Vendor Advisory
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:43.fetchmail.asc · Vendor Advisory
• http://securityfocus.com/bid/2877 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6704 · Note