CVSS: 2.1EPSS: 0%CPEs: 59EXPL: 0CVE-2001-1378
https://notcve.org/view.php?id=CVE-2001-1378
fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files. • http://lists.ccil.org/pipermail/fetchmail-announce/2001-March/000015.html http://www.redhat.com/support/errata/RHSA-2001-103.html • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 10.0EPSS: 1%CPEs: 71EXPL: 5CVE-2001-1009 – Fetchmail 5.x - IMAP Reply Signed Integer Index
https://notcve.org/view.php?id=CVE-2001-1009
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request. • https://www.exploit-db.com/exploits/21066 https://www.exploit-db.com/exploits/21064 http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419 http://www.debian.org/security/2001/dsa-071 http://www.iss.net/security_center/static/6965.php http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-072.php3 http://www.linuxsecurity.com/advisories/other_advisory-1555.html http://www.novell.com/linux/secur • CWE-264: Permissions, Privileges, and Access Controls •