Red Hat Security AdvisoryRHSA-2007:0018
fetchmail security update
Released 2007-01-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 fetchmail-6.2.0-3.el3.3, fetchmail-6.2.0-3.el3.3.i386
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fetchmail-5.9.0-21.7.3.el2.1.4, fetchmail-5.9.0-21.7.3.el2.1.4.i386, fetchmail-5.9.0-21.7.3.el2.1.4.ia64 +2
- Red Hat Enterprise Linux AS version 3 fetchmail-6.2.0-3.el3.3, fetchmail-6.2.0-3.el3.3.i386, fetchmail-6.2.0-3.el3.3.ia64 +1
- Red Hat Enterprise Linux AS version 4 fetchmail-6.2.5-6.el4.5, fetchmail-6.2.5-6.el4.5.i386, fetchmail-6.2.5-6.el4.5.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 fetchmail-6.2.5-6.el4.5, fetchmail-6.2.5-6.el4.5.i386
- Red Hat Enterprise Linux ES version 2.1 fetchmail-5.9.0-21.7.3.el2.1.4, fetchmail-5.9.0-21.7.3.el2.1.4.i386, fetchmailconf-5.9.0-21.7.3.el2.1.4.i386
- Red Hat Enterprise Linux ES version 3 fetchmail-6.2.0-3.el3.3, fetchmail-6.2.0-3.el3.3.i386, fetchmail-6.2.0-3.el3.3.ia64
- Red Hat Enterprise Linux ES version 4 fetchmail-6.2.5-6.el4.5, fetchmail-6.2.5-6.el4.5.i386, fetchmail-6.2.5-6.el4.5.ia64
- Red Hat Enterprise Linux WS version 2.1 fetchmail-5.9.0-21.7.3.el2.1.4, fetchmail-5.9.0-21.7.3.el2.1.4.i386, fetchmailconf-5.9.0-21.7.3.el2.1.4.i386
- Red Hat Enterprise Linux WS version 3 fetchmail-6.2.0-3.el3.3, fetchmail-6.2.0-3.el3.3.i386, fetchmail-6.2.0-3.el3.3.ia64
- Red Hat Enterprise Linux WS version 4 fetchmail-6.2.5-6.el4.5, fetchmail-6.2.5-6.el4.5.i386, fetchmail-6.2.5-6.el4.5.ia64
- Red Hat Linux Advanced Workstation 2.1 fetchmail-5.9.0-21.7.3.el2.1.4, fetchmail-5.9.0-21.7.3.el2.1.4.ia64, fetchmailconf-5.9.0-21.7.3.el2.1.4.ia64
Fixes 2 records
Priority MEDIUM 41
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.04505 · Published 2007-01-09 · Fixed CWE-20
Priority MEDIUM 40
fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03641 · Published 2005-12-21 · Fixed CWE-399
