Vulnerabilities (CVE)

Filtered by vendor Fetchmail Subscribe
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1009 1 Fetchmail 1 Fetchmail 2024-02-04 10.0 HIGH N/A
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.
CVE-2002-0146 1 Fetchmail 1 Fetchmail 2024-02-04 5.0 MEDIUM N/A
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
CVE-2001-1378 1 Fetchmail 1 Fetchmail 2024-02-04 2.1 LOW N/A
fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.
CVE-2002-1175 1 Fetchmail 1 Fetchmail 2024-02-04 5.0 MEDIUM N/A
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.