CVSS: 10.0EPSS: 1%CPEs: 71EXPL: 5CVE-2001-1009 – Fetchmail 5.x - IMAP Reply Signed Integer Index
https://notcve.org/view.php?id=CVE-2001-1009
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request. • https://www.exploit-db.com/exploits/21066 https://www.exploit-db.com/exploits/21064 http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419 http://www.debian.org/security/2001/dsa-071 http://www.iss.net/security_center/static/6965.php http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-072.php3 http://www.linuxsecurity.com/advisories/other_advisory-1555.html http://www.novell.com/linux/secur • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 1%CPEs: 52EXPL: 0CVE-2001-0101
https://notcve.org/view.php?id=CVE-2001-0101
Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command. • http://www.redhat.com/support/errata/RHBA-2000-106.html http://www.turbolinux.com/pipermail/tl-security-announce/2000-December/000027.html https://exchange.xforce.ibmcloud.com/vulnerabilities/7455 •