CVE-2005-2335
CVE-2005-2335
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier.
EPSS 5,9% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
n/a
- Softwareversionen
- n/a: Betroffen
Keine Korrektur veröffentlicht
fetchmail Debian:12
- Betroffene Versionsbereiche
- ECOSYSTEM: < 6.2.5-16
Auf 6.2.5-16 aktualisieren
fetchmail Debian:13
- Betroffene Versionsbereiche
- ECOSYSTEM: < 6.2.5-16
Auf 6.2.5-16 aktualisieren
fetchmail Debian:14
- Betroffene Versionsbereiche
- ECOSYSTEM: < 6.2.5-16
Auf 6.2.5-16 aktualisieren
Originalquellen
- http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
- http://www.securityfocus.com/bid/14349
- http://www.novell.com/linux/security/advisories/2005_18_sr.html
- http://www.vupen.com/english/advisories/2006/3101
- http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html
- http://www.vupen.com/english/advisories/2005/1171
- http://secunia.com/advisories/21253
- http://www.securityfocus.com/bid/19289
- http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt
- http://www.osvdb.org/18174
- http://www.us-cert.gov/cas/techalerts/TA06-214A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1124
- http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00088.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1038
- http://developer.berlios.de/project/shownotes.php?release_id=6617
- http://www.securityfocus.com/archive/1/441856/100/200/threaded
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8833
- http://www.debian.org/security/2005/dsa-774
- http://www.redhat.com/support/errata/RHSA-2005-640.html
- http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00089.html
- http://www.securityfocus.com/archive/1/435197/100/0/threaded
- http://secunia.com/advisories/16176
- https://nvd.nist.gov/vuln/detail/CVE-2005-2335