7.5

CVE-2001-0819

A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fetchmail ≫ Fetchmail Version <= 5.8.5
Fetchmail ≫ Fetchmail Version 4.5.1
Fetchmail ≫ Fetchmail Version 4.5.2
Fetchmail ≫ Fetchmail Version 4.5.3
Fetchmail ≫ Fetchmail Version 4.5.4
Fetchmail ≫ Fetchmail Version 4.5.5
Fetchmail ≫ Fetchmail Version 4.5.6
Fetchmail ≫ Fetchmail Version 4.5.7
Fetchmail ≫ Fetchmail Version 4.5.8
Fetchmail ≫ Fetchmail Version 4.6.0
Fetchmail ≫ Fetchmail Version 4.6.1
Fetchmail ≫ Fetchmail Version 4.6.2
Fetchmail ≫ Fetchmail Version 4.6.3
Fetchmail ≫ Fetchmail Version 4.6.4
Fetchmail ≫ Fetchmail Version 4.6.5
Fetchmail ≫ Fetchmail Version 4.6.6
Fetchmail ≫ Fetchmail Version 4.6.7
Fetchmail ≫ Fetchmail Version 4.6.8
Fetchmail ≫ Fetchmail Version 4.6.9
Fetchmail ≫ Fetchmail Version 4.7.0
Fetchmail ≫ Fetchmail Version 4.7.1
Fetchmail ≫ Fetchmail Version 4.7.2
Fetchmail ≫ Fetchmail Version 4.7.3
Fetchmail ≫ Fetchmail Version 4.7.4
Fetchmail ≫ Fetchmail Version 4.7.5
Fetchmail ≫ Fetchmail Version 4.7.6
Fetchmail ≫ Fetchmail Version 4.7.7
Fetchmail ≫ Fetchmail Version 5.0.0
Fetchmail ≫ Fetchmail Version 5.0.1
Fetchmail ≫ Fetchmail Version 5.0.2
Fetchmail ≫ Fetchmail Version 5.0.3
Fetchmail ≫ Fetchmail Version 5.0.4
Fetchmail ≫ Fetchmail Version 5.0.5
Fetchmail ≫ Fetchmail Version 5.0.6
Fetchmail ≫ Fetchmail Version 5.0.7
Fetchmail ≫ Fetchmail Version 5.0.8
Fetchmail ≫ Fetchmail Version 5.1.0
Fetchmail ≫ Fetchmail Version 5.1.4
Fetchmail ≫ Fetchmail Version 5.2.0
Fetchmail ≫ Fetchmail Version 5.2.1
Fetchmail ≫ Fetchmail Version 5.2.3
Fetchmail ≫ Fetchmail Version 5.2.4
Fetchmail ≫ Fetchmail Version 5.2.7
Fetchmail ≫ Fetchmail Version 5.2.8
Fetchmail ≫ Fetchmail Version 5.3.0
Fetchmail ≫ Fetchmail Version 5.3.1
Fetchmail ≫ Fetchmail Version 5.3.3
Fetchmail ≫ Fetchmail Version 5.3.8
Fetchmail ≫ Fetchmail Version 5.4.0
Fetchmail ≫ Fetchmail Version 5.4.3
Fetchmail ≫ Fetchmail Version 5.4.4
Fetchmail ≫ Fetchmail Version 5.4.5
Fetchmail ≫ Fetchmail Version 5.5.0
Fetchmail ≫ Fetchmail Version 5.5.2
Fetchmail ≫ Fetchmail Version 5.5.3
Fetchmail ≫ Fetchmail Version 5.5.5
Fetchmail ≫ Fetchmail Version 5.5.6
Fetchmail ≫ Fetchmail Version 5.6.0
Fetchmail ≫ Fetchmail Version 5.7.0
Fetchmail ≫ Fetchmail Version 5.7.2
Fetchmail ≫ Fetchmail Version 5.7.4
Fetchmail ≫ Fetchmail Version 5.8
Fetchmail ≫ Fetchmail Version 5.8.1
Fetchmail ≫ Fetchmail Version 5.8.2
Fetchmail ≫ Fetchmail Version 5.8.3
Fetchmail ≫ Fetchmail Version 5.8.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.37% 0.928
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.novell.com/linux/security/advisories/2001_026_fetchmail_txt.html
http://www.redhat.com/support/errata/RHSA-2001-103.html
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:43.fetchmail.asc
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000403
http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-025-01
http://www.caldera.com/support/security/advisories/CSSA-2001-022.1.txt
http://www.debian.org/security/2001/dsa-060
Patch
Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-063.php3?dis=7.1
http://www.linuxsecurity.com/advisories/other_advisory-1451.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2877
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6704