CVE-2001-1009 – Fetchmail 5.x - IMAP Reply Signed Integer Index

https://notcve.org/view.php?id=CVE-2001-1009

Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request. • https://www.exploit-db.com/exploits/21066 https://www.exploit-db.com/exploits/21064 http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419 http://www.debian.org/security/2001/dsa-071 http://www.iss.net/security_center/static/6965.php http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-072.php3 http://www.linuxsecurity.com/advisories/other_advisory-1555.html http://www.novell.com/linux/secur • CWE-264: Permissions, Privileges, and Access Controls •