CVE-2005-2335
CVE-2005-2335
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier.
EPSS 5,9% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
fetchmail Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 6.2.5-16
Actualiza a 6.2.5-16
fetchmail Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 6.2.5-16
Actualiza a 6.2.5-16
fetchmail Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 6.2.5-16
Actualiza a 6.2.5-16
Fuentes originales
- http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
- http://www.securityfocus.com/bid/14349
- http://www.novell.com/linux/security/advisories/2005_18_sr.html
- http://www.vupen.com/english/advisories/2006/3101
- http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html
- http://www.vupen.com/english/advisories/2005/1171
- http://secunia.com/advisories/21253
- http://www.securityfocus.com/bid/19289
- http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt
- http://www.osvdb.org/18174
- http://www.us-cert.gov/cas/techalerts/TA06-214A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1124
- http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00088.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1038
- http://developer.berlios.de/project/shownotes.php?release_id=6617
- http://www.securityfocus.com/archive/1/441856/100/200/threaded
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8833
- http://www.debian.org/security/2005/dsa-774
- http://www.redhat.com/support/errata/RHSA-2005-640.html
- http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00089.html
- http://www.securityfocus.com/archive/1/435197/100/0/threaded
- http://secunia.com/advisories/16176
- https://nvd.nist.gov/vuln/detail/CVE-2005-2335