Search for packages
| purl | pkg:deb/ubuntu/fetchmail@6.3.8-11ubuntu1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-62nh-5871-aaar
Aliases: CVE-2012-3482 |
Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read. |
Affected by 0 other vulnerabilities. |
|
VCID-dqer-jfgw-aaaq
Aliases: CVE-2011-1947 |
fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets. |
Affected by 0 other vulnerabilities. |
|
VCID-pft5-dufe-aaas
Aliases: CVE-2010-1167 |
fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|