PT-2002-1232 · Fetchmail · Fetchmail

Published 2002-06-25 · Updated 2011-02-15 · CVE-2002-0146

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions fetchmail versions prior to 5.9.10

Description The issue concerns the fetchmail email client, which does not properly limit the maximum number of messages available. This allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.

Recommendations For versions prior to 5.9.10, update to version 5.9.10 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2002-0146

Affected Products

Fetchmail

References · 7

• http://redhat.com/support/errata/RHSA-2002-047.html · Vendor Advisory
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-027.0.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0146 · Security Note
• http://linux-mandrake.com/en/security/2002/MDKSA-2002-036.php · Vendor Advisory
• http://online.securityfocus.com/advisories/4145 · Vendor Advisory
• http://iss.net/security_center/static/9133.php · Note
• http://securityfocus.com/bid/4788 · Note