Page 5 of 24 results (0.001 seconds)

CVSS: 7.5EPSS: 9%CPEs: 66EXPL: 0

A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:43.fetchmail.asc http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000403 http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-025-01 http://www.caldera.com/support/security/advisories/CSSA-2001-022.1.txt http://www.debian.org/security/2001/dsa-060 http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-063.php3?dis=7.1 http://www.linuxsecurity.com/advisories/other_advisory-1451.html http • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 2.1EPSS: 0%CPEs: 59EXPL: 0

fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files. • http://lists.ccil.org/pipermail/fetchmail-announce/2001-March/000015.html http://www.redhat.com/support/errata/RHSA-2001-103.html • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 10.0EPSS: 1%CPEs: 71EXPL: 5

Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request. • https://www.exploit-db.com/exploits/21066 https://www.exploit-db.com/exploits/21064 http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419 http://www.debian.org/security/2001/dsa-071 http://www.iss.net/security_center/static/6965.php http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-072.php3 http://www.linuxsecurity.com/advisories/other_advisory-1555.html http://www.novell.com/linux/secur • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 10.0EPSS: 1%CPEs: 52EXPL: 0

Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command. • http://www.redhat.com/support/errata/RHBA-2000-106.html http://www.turbolinux.com/pipermail/tl-security-announce/2000-December/000027.html https://exchange.xforce.ibmcloud.com/vulnerabilities/7455 •