CVE-2006-0321

fetchmail < 6.3.2 - Denial of Service via Crafted Email Message Bounce

Title source: llm

Description

fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster.

References (17)

Core 17

Core References

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/16365

Various Sources x_refsource_confirm

http://developer.berlios.de/project/shownotes.php?release_id=8784

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/24265

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/422936/100/0/threaded

Patch, Vendor Advisory x_refsource_confirm

http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/3101

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21253

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18571

Vendor Advisory vendor-advisory x_refsource_slackware

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/0300

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/19289

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA06-214A.html

Issue Tracking x_refsource_confirm

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/22691

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015527

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18895

Scores

EPSS 0.0350

EPSS Percentile 87.8%

Details

CWE

CWE-20

Status published

Products (2)

fetchmail/fetchmail 6.3.0

fetchmail/fetchmail 6.3.1

Published Jan 24, 2006

Tracked Since Feb 18, 2026