5.8

CVE-2012-3482

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fetchmail ≫ Fetchmail Version 5.0.8
Fetchmail ≫ Fetchmail Version 5.1.0
Fetchmail ≫ Fetchmail Version 5.1.4
Fetchmail ≫ Fetchmail Version 5.2.0
Fetchmail ≫ Fetchmail Version 5.2.1
Fetchmail ≫ Fetchmail Version 5.2.3
Fetchmail ≫ Fetchmail Version 5.2.4
Fetchmail ≫ Fetchmail Version 5.2.7
Fetchmail ≫ Fetchmail Version 5.2.8
Fetchmail ≫ Fetchmail Version 5.3.0
Fetchmail ≫ Fetchmail Version 5.3.1
Fetchmail ≫ Fetchmail Version 5.3.3
Fetchmail ≫ Fetchmail Version 5.3.8
Fetchmail ≫ Fetchmail Version 5.4.0
Fetchmail ≫ Fetchmail Version 5.4.3
Fetchmail ≫ Fetchmail Version 5.4.4
Fetchmail ≫ Fetchmail Version 5.4.5
Fetchmail ≫ Fetchmail Version 5.5.0
Fetchmail ≫ Fetchmail Version 5.5.2
Fetchmail ≫ Fetchmail Version 5.5.3
Fetchmail ≫ Fetchmail Version 5.5.5
Fetchmail ≫ Fetchmail Version 5.5.6
Fetchmail ≫ Fetchmail Version 5.6.0
Fetchmail ≫ Fetchmail Version 5.7.0
Fetchmail ≫ Fetchmail Version 5.7.2
Fetchmail ≫ Fetchmail Version 5.7.4
Fetchmail ≫ Fetchmail Version 5.8
Fetchmail ≫ Fetchmail Version 5.8.1
Fetchmail ≫ Fetchmail Version 5.8.2
Fetchmail ≫ Fetchmail Version 5.8.3
Fetchmail ≫ Fetchmail Version 5.8.4
Fetchmail ≫ Fetchmail Version 5.8.5
Fetchmail ≫ Fetchmail Version 5.8.6
Fetchmail ≫ Fetchmail Version 5.8.11
Fetchmail ≫ Fetchmail Version 5.8.13
Fetchmail ≫ Fetchmail Version 5.8.14
Fetchmail ≫ Fetchmail Version 5.8.17
Fetchmail ≫ Fetchmail Version 5.9.0
Fetchmail ≫ Fetchmail Version 5.9.4
Fetchmail ≫ Fetchmail Version 5.9.5
Fetchmail ≫ Fetchmail Version 5.9.8
Fetchmail ≫ Fetchmail Version 5.9.10
Fetchmail ≫ Fetchmail Version 5.9.11
Fetchmail ≫ Fetchmail Version 5.9.13
Fetchmail ≫ Fetchmail Version 6.0.0
Fetchmail ≫ Fetchmail Version 6.1.0
Fetchmail ≫ Fetchmail Version 6.1.3
Fetchmail ≫ Fetchmail Version 6.2.0
Fetchmail ≫ Fetchmail Version 6.2.1
Fetchmail ≫ Fetchmail Version 6.2.2
Fetchmail ≫ Fetchmail Version 6.2.3
Fetchmail ≫ Fetchmail Version 6.2.4
Fetchmail ≫ Fetchmail Version 6.2.5
Fetchmail ≫ Fetchmail Version 6.2.5.1
Fetchmail ≫ Fetchmail Version 6.2.5.2
Fetchmail ≫ Fetchmail Version 6.2.5.4
Fetchmail ≫ Fetchmail Version 6.2.6 Update pre4
Fetchmail ≫ Fetchmail Version 6.2.6 Update pre8
Fetchmail ≫ Fetchmail Version 6.2.6 Update pre9
Fetchmail ≫ Fetchmail Version 6.2.9 Update rc10
Fetchmail ≫ Fetchmail Version 6.2.9 Update rc3
Fetchmail ≫ Fetchmail Version 6.2.9 Update rc4
Fetchmail ≫ Fetchmail Version 6.2.9 Update rc5
Fetchmail ≫ Fetchmail Version 6.2.9 Update rc7
Fetchmail ≫ Fetchmail Version 6.2.9 Update rc8
Fetchmail ≫ Fetchmail Version 6.2.9 Update rc9
Fetchmail ≫ Fetchmail Version 6.3.0
Fetchmail ≫ Fetchmail Version 6.3.1
Fetchmail ≫ Fetchmail Version 6.3.2
Fetchmail ≫ Fetchmail Version 6.3.3
Fetchmail ≫ Fetchmail Version 6.3.4
Fetchmail ≫ Fetchmail Version 6.3.5
Fetchmail ≫ Fetchmail Version 6.3.6
Fetchmail ≫ Fetchmail Version 6.3.6 Update rc1
Fetchmail ≫ Fetchmail Version 6.3.6 Update rc2
Fetchmail ≫ Fetchmail Version 6.3.6 Update rc3
Fetchmail ≫ Fetchmail Version 6.3.6 Update rc4
Fetchmail ≫ Fetchmail Version 6.3.6 Update rc5
Fetchmail ≫ Fetchmail Version 6.3.7
Fetchmail ≫ Fetchmail Version 6.3.8
Fetchmail ≫ Fetchmail Version 6.3.9
Fetchmail ≫ Fetchmail Version 6.3.9 Update rc2
Fetchmail ≫ Fetchmail Version 6.3.10
Fetchmail ≫ Fetchmail Version 6.3.11
Fetchmail ≫ Fetchmail Version 6.3.12
Fetchmail ≫ Fetchmail Version 6.3.13
Fetchmail ≫ Fetchmail Version 6.3.14
Fetchmail ≫ Fetchmail Version 6.3.15
Fetchmail ≫ Fetchmail Version 6.3.16
Fetchmail ≫ Fetchmail Version 6.3.17
Fetchmail ≫ Fetchmail Version 6.3.18
Fetchmail ≫ Fetchmail Version 6.3.19
Fetchmail ≫ Fetchmail Version 6.3.21
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.87% 0.767
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088836.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088871.html
http://seclists.org/oss-sec/2012/q3/230
http://seclists.org/oss-sec/2012/q3/232
http://www.fetchmail.info/fetchmail-SA-2012-02.txt
Patch
Vendor Advisory
http://www.securityfocus.com/bid/54987