fkie_cve-2002-1365
Vulnerability from fkie_nvd
Published
2002-12-23 05:00
Modified
2025-04-03 01:03
Severity ?
Summary
Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.
References
cve@mitre.orgftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt
cve@mitre.orghttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554
cve@mitre.orghttp://marc.info/?l=bugtraq&m=103979751818638&w=2
cve@mitre.orghttp://marc.info/?l=bugtraq&m=104004858802000&w=2
cve@mitre.orghttp://security.e-matters.de/advisories/052002.html
cve@mitre.orghttp://www.debian.org/security/2002/dsa-216
cve@mitre.orghttp://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011
cve@mitre.orghttp://www.redhat.com/support/errata/RHSA-2002-293.htmlPatch, Vendor Advisory
cve@mitre.orghttp://www.redhat.com/support/errata/RHSA-2002-294.html
cve@mitre.orghttp://www.redhat.com/support/errata/RHSA-2003-155.html
cve@mitre.orghttp://www.securityfocus.com/bid/6390
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/10839
af854a3a-2127-422b-91ae-364da2661108ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt
af854a3a-2127-422b-91ae-364da2661108http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=103979751818638&w=2
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=104004858802000&w=2
af854a3a-2127-422b-91ae-364da2661108http://security.e-matters.de/advisories/052002.html
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2002/dsa-216
af854a3a-2127-422b-91ae-364da2661108http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2002-293.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2002-294.html
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2003-155.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/6390
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/10839
Impacted products
Vendor Product Version
fetchmail fetchmail *
fetchmail fetchmail 4.5.1
fetchmail fetchmail 4.5.2
fetchmail fetchmail 4.5.3
fetchmail fetchmail 4.5.4
fetchmail fetchmail 4.5.5
fetchmail fetchmail 4.5.6
fetchmail fetchmail 4.5.7
fetchmail fetchmail 4.5.8
fetchmail fetchmail 4.6.0
fetchmail fetchmail 4.6.1
fetchmail fetchmail 4.6.2
fetchmail fetchmail 4.6.3
fetchmail fetchmail 4.6.4
fetchmail fetchmail 4.6.5
fetchmail fetchmail 4.6.6
fetchmail fetchmail 4.6.7
fetchmail fetchmail 4.6.8
fetchmail fetchmail 4.6.9
fetchmail fetchmail 4.7.0
fetchmail fetchmail 4.7.1
fetchmail fetchmail 4.7.2
fetchmail fetchmail 4.7.3
fetchmail fetchmail 4.7.4
fetchmail fetchmail 4.7.5
fetchmail fetchmail 4.7.6
fetchmail fetchmail 4.7.7
fetchmail fetchmail 5.0.0
fetchmail fetchmail 5.0.1
fetchmail fetchmail 5.0.2
fetchmail fetchmail 5.0.3
fetchmail fetchmail 5.0.4
fetchmail fetchmail 5.0.5
fetchmail fetchmail 5.0.6
fetchmail fetchmail 5.0.7
fetchmail fetchmail 5.0.8
fetchmail fetchmail 5.1.0
fetchmail fetchmail 5.1.4
fetchmail fetchmail 5.2.0
fetchmail fetchmail 5.2.1
fetchmail fetchmail 5.2.3
fetchmail fetchmail 5.2.4
fetchmail fetchmail 5.2.7
fetchmail fetchmail 5.2.8
fetchmail fetchmail 5.3.0
fetchmail fetchmail 5.3.1
fetchmail fetchmail 5.3.3
fetchmail fetchmail 5.3.8
fetchmail fetchmail 5.4.0
fetchmail fetchmail 5.4.3
fetchmail fetchmail 5.4.4
fetchmail fetchmail 5.4.5
fetchmail fetchmail 5.5.0
fetchmail fetchmail 5.5.2
fetchmail fetchmail 5.5.3
fetchmail fetchmail 5.5.5
fetchmail fetchmail 5.5.6
fetchmail fetchmail 5.6.0
fetchmail fetchmail 5.7.0
fetchmail fetchmail 5.7.2
fetchmail fetchmail 5.7.4
fetchmail fetchmail 5.8
fetchmail fetchmail 5.8.1
fetchmail fetchmail 5.8.2
fetchmail fetchmail 5.8.3
fetchmail fetchmail 5.8.4
fetchmail fetchmail 5.8.5
fetchmail fetchmail 5.8.6
fetchmail fetchmail 5.8.11
fetchmail fetchmail 5.8.13
fetchmail fetchmail 5.8.14
fetchmail fetchmail 5.8.17
fetchmail fetchmail 5.9.0
fetchmail fetchmail 5.9.4
fetchmail fetchmail 5.9.5
fetchmail fetchmail 5.9.8
fetchmail fetchmail 5.9.10
fetchmail fetchmail 5.9.11
fetchmail fetchmail 5.9.13
fetchmail fetchmail 6.0.0
fetchmail fetchmail 6.1.0



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "07031C7D-31F1-491C-ACA2-5B5289DE36E9",
              "versionEndIncluding": "6.1.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF519D04-7596-42C6-A1D8-FC1018D1A414",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9AFEC739-BDFA-4D14-9A04-96FFB71AE330",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1923712-7B88-483E-B38A-0EA6FB38EB38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9608A96-D131-401B-B041-09ADEEB59354",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4555DBB-B63B-4637-86A9-399B34B27D14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8AB8504-8CD1-4013-9413-1378F3BAE0AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DC47DA9-D110-4E6B-9F5B-D17ECB942B40",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "345D0848-958F-4B44-8F31-0793C36A5ADD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E179061-FB6A-44AA-8EAC-4916719D9A28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "58A6B5F4-C799-45C4-9EAD-A55023767033",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "54FDB8B9-5537-4E08-8FA0-931D4BED43E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC13DE1B-1428-4842-9567-BBE5EEF7042F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "215ED879-1E26-4FF4-8857-18499C5DE3A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "72604F3D-2DE8-4BFF-97D5-4AFA64399201",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "8792F7FF-9E56-4201-89FD-F0146D4F0DF9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "B12812E8-1C5B-46CF-A266-EE19C5CD3B12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DEAA0E8-746D-446D-AAEA-0ED287766332",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D3E14C3-82AE-4D4A-8963-438BECBA5678",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DCFB7BB-2879-4EB7-BE1D-163238E313C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6ED223B6-1864-415C-96D6-64E1EDE4C840",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "14CBC8ED-CC10-40B6-8AA7-9F1342432ECB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3417C2E-1117-4FE7-B2FA-74CAB57235B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "07C61DC4-50D5-44B2-92F8-A59C65144108",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "31A37E19-1E07-4FD0-AC6D-6AC3ED954787",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "570C9443-81CE-42AC-B4A6-3B2ABAD97EC5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "853DD3E0-668F-4FAC-BA0B-D4E9C416D646",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CEF70FCA-5DA4-4C0B-B876-0345FA077D44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "78D12F53-07DE-447D-8403-40EB75B91955",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "19ECB844-F378-4A94-B9FC-A731B8186013",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "3169AA63-79F6-4B89-9405-8F6A2FB6FD64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "88D1D54C-81A4-44CE-BE12-798CF7DD2CC4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6615C7D-09B5-4943-A124-2FF9A0F4B927",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF18219F-0406-4D46-90DE-EA2A17C8EFF7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "87B56DFD-BDA9-4D8B-BE54-BF59B762D574",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "33EA0CA8-468F-4A94-8DA3-5D820AB65973",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA21C847-57ED-4E7D-9366-6038467D9080",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0450BD04-15D2-4122-A210-6225B89BDA7F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "18428805-AEB2-4BA4-9762-906B59CE74D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFCCBB15-DFFE-4A57-A029-E57707D15E04",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "89A4B962-BE5B-471C-83EF-674525C5AE83",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7166ECCB-54FB-44EA-BA80-4D2AAF494AF2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B309C89-99E2-4F0B-976C-95E44A45ADC5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3DE7EE7-F627-4955-8D95-1F00F1F85C7D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "D549098D-FE16-4BCB-91C4-D71A8C8D2E9F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "57BFA165-6E2E-49AF-9E2D-3D8923CF36C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5C67DFF-A1BE-4486-A11F-CD3729927220",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D365E6E-8777-4084-BEC8-7CBF4997D976",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "20C4FF28-0DBA-4995-8252-2D62FF896BC4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "96774635-9A12-4DAB-BCF6-2D678F244CE9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFD2EE7A-36CB-4A26-8EEB-DACA2864D921",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4267DCE8-985C-416D-A6B7-536585E5A573",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "50E63EDF-FF0A-447C-A3FC-7BA2414C15CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "61DDD4A1-6185-41B6-A715-4C70F0AA2631",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "B10A7E3C-07CD-48A6-9075-5314B4E1EEAB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "319955A4-27A8-46FF-ACE7-97E6DF27B2DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "925CF3DD-682B-40E6-900C-23F784CD9239",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "16366780-611E-4217-A614-EBA01421D148",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "43AEA36F-E730-4305-9CB6-738A7152F02E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B9536BA-6334-4957-9632-6D64365B88AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "F52FA32B-8048-4FD7-9D20-20DC5E52098B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FA92DF1-3AAD-46AC-A9E4-E9386C977818",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "837D66DB-F9CB-41F1-A091-BCFBAC2F45B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "74D12B67-6E66-419A-A28F-6306402931EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "A71FCBED-B25D-48E3-916C-FBA9E0DE8D12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A17995E-DCAF-465A-8ABD-F1EA0D538784",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "93D03D78-C56E-4189-97FC-916C918EDFEE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "19A66C77-041F-4A12-8A36-233A6B50641C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.9.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "C945059C-EF39-486D-A804-FBB8704AB927",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "1258CA65-FBC1-4848-A9E5-A8F5E5D6FBD5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "A91C6418-41F0-46EB-ACFC-FCE907F5AA87",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C020534-7596-496C-B9B0-739F58F6F4EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:6.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A77D40C-6FF5-42BD-9EFB-B532824D7606",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:6.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F04C6A76-2718-4DBA-8972-A3EECDDB1A17",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the \"@\" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en el mont\u00edculo (heap) en Fetchmail 6.1.3 y anteriores no tiene en cuenta el car\u00e1cter \"@\" cuando determina la longitud del b\u00fafer para direcciones locales, lo que permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante una cabecera con un n\u00famero largo de direcciones locales."
    }
  ],
  "id": "CVE-2002-1365",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2002-12-23T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000554"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=103979751818638\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=104004858802000\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.e-matters.de/advisories/052002.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2002/dsa-216"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2002-293.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2002-294.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2003-155.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/6390"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10839"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000554"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=103979751818638\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=104004858802000\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.e-matters.de/advisories/052002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2002/dsa-216"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2002-293.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2002-294.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2003-155.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/6390"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10839"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…