5.8

CVE-2012-3482

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fetchmail ≫ Fetchmail Version5.0.8
Fetchmail ≫ Fetchmail Version5.1.0
Fetchmail ≫ Fetchmail Version5.1.4
Fetchmail ≫ Fetchmail Version5.2.0
Fetchmail ≫ Fetchmail Version5.2.1
Fetchmail ≫ Fetchmail Version5.2.3
Fetchmail ≫ Fetchmail Version5.2.4
Fetchmail ≫ Fetchmail Version5.2.7
Fetchmail ≫ Fetchmail Version5.2.8
Fetchmail ≫ Fetchmail Version5.3.0
Fetchmail ≫ Fetchmail Version5.3.1
Fetchmail ≫ Fetchmail Version5.3.3
Fetchmail ≫ Fetchmail Version5.3.8
Fetchmail ≫ Fetchmail Version5.4.0
Fetchmail ≫ Fetchmail Version5.4.3
Fetchmail ≫ Fetchmail Version5.4.4
Fetchmail ≫ Fetchmail Version5.4.5
Fetchmail ≫ Fetchmail Version5.5.0
Fetchmail ≫ Fetchmail Version5.5.2
Fetchmail ≫ Fetchmail Version5.5.3
Fetchmail ≫ Fetchmail Version5.5.5
Fetchmail ≫ Fetchmail Version5.5.6
Fetchmail ≫ Fetchmail Version5.6.0
Fetchmail ≫ Fetchmail Version5.7.0
Fetchmail ≫ Fetchmail Version5.7.2
Fetchmail ≫ Fetchmail Version5.7.4
Fetchmail ≫ Fetchmail Version5.8
Fetchmail ≫ Fetchmail Version5.8.1
Fetchmail ≫ Fetchmail Version5.8.2
Fetchmail ≫ Fetchmail Version5.8.3
Fetchmail ≫ Fetchmail Version5.8.4
Fetchmail ≫ Fetchmail Version5.8.5
Fetchmail ≫ Fetchmail Version5.8.6
Fetchmail ≫ Fetchmail Version5.8.11
Fetchmail ≫ Fetchmail Version5.8.13
Fetchmail ≫ Fetchmail Version5.8.14
Fetchmail ≫ Fetchmail Version5.8.17
Fetchmail ≫ Fetchmail Version5.9.0
Fetchmail ≫ Fetchmail Version5.9.4
Fetchmail ≫ Fetchmail Version5.9.5
Fetchmail ≫ Fetchmail Version5.9.8
Fetchmail ≫ Fetchmail Version5.9.10
Fetchmail ≫ Fetchmail Version5.9.11
Fetchmail ≫ Fetchmail Version5.9.13
Fetchmail ≫ Fetchmail Version6.0.0
Fetchmail ≫ Fetchmail Version6.1.0
Fetchmail ≫ Fetchmail Version6.1.3
Fetchmail ≫ Fetchmail Version6.2.0
Fetchmail ≫ Fetchmail Version6.2.1
Fetchmail ≫ Fetchmail Version6.2.2
Fetchmail ≫ Fetchmail Version6.2.3
Fetchmail ≫ Fetchmail Version6.2.4
Fetchmail ≫ Fetchmail Version6.2.5
Fetchmail ≫ Fetchmail Version6.2.5.1
Fetchmail ≫ Fetchmail Version6.2.5.2
Fetchmail ≫ Fetchmail Version6.2.5.4
Fetchmail ≫ Fetchmail Version6.2.6 Updatepre4
Fetchmail ≫ Fetchmail Version6.2.6 Updatepre8
Fetchmail ≫ Fetchmail Version6.2.6 Updatepre9
Fetchmail ≫ Fetchmail Version6.2.9 Updaterc10
Fetchmail ≫ Fetchmail Version6.2.9 Updaterc3
Fetchmail ≫ Fetchmail Version6.2.9 Updaterc4
Fetchmail ≫ Fetchmail Version6.2.9 Updaterc5
Fetchmail ≫ Fetchmail Version6.2.9 Updaterc7
Fetchmail ≫ Fetchmail Version6.2.9 Updaterc8
Fetchmail ≫ Fetchmail Version6.2.9 Updaterc9
Fetchmail ≫ Fetchmail Version6.3.0
Fetchmail ≫ Fetchmail Version6.3.1
Fetchmail ≫ Fetchmail Version6.3.2
Fetchmail ≫ Fetchmail Version6.3.3
Fetchmail ≫ Fetchmail Version6.3.4
Fetchmail ≫ Fetchmail Version6.3.5
Fetchmail ≫ Fetchmail Version6.3.6
Fetchmail ≫ Fetchmail Version6.3.6 Updaterc1
Fetchmail ≫ Fetchmail Version6.3.6 Updaterc2
Fetchmail ≫ Fetchmail Version6.3.6 Updaterc3
Fetchmail ≫ Fetchmail Version6.3.6 Updaterc4
Fetchmail ≫ Fetchmail Version6.3.6 Updaterc5
Fetchmail ≫ Fetchmail Version6.3.7
Fetchmail ≫ Fetchmail Version6.3.8
Fetchmail ≫ Fetchmail Version6.3.9
Fetchmail ≫ Fetchmail Version6.3.9 Updaterc2
Fetchmail ≫ Fetchmail Version6.3.10
Fetchmail ≫ Fetchmail Version6.3.11
Fetchmail ≫ Fetchmail Version6.3.12
Fetchmail ≫ Fetchmail Version6.3.13
Fetchmail ≫ Fetchmail Version6.3.14
Fetchmail ≫ Fetchmail Version6.3.15
Fetchmail ≫ Fetchmail Version6.3.16
Fetchmail ≫ Fetchmail Version6.3.17
Fetchmail ≫ Fetchmail Version6.3.18
Fetchmail ≫ Fetchmail Version6.3.19
Fetchmail ≫ Fetchmail Version6.3.21
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.87% 0.767
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088836.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088871.html
http://seclists.org/oss-sec/2012/q3/230
http://seclists.org/oss-sec/2012/q3/232
http://www.fetchmail.info/fetchmail-SA-2012-02.txt
Patch
Vendor Advisory
http://www.securityfocus.com/bid/54987