CVE-2005-3088

Published: Oct 27, 2005Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.

Affected (3)

Products: Fetchmail: Fetchmail

Fetchmail

1 product

Fetchmail

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Fetchmail Fetchmail	Version 6.2.0
Fetchmail Fetchmail	Version 6.2.5.2
Fetchmail Fetchmail	Version 6.2.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (48)

http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt

Source: cve@mitre.org

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=113042785902031&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17293

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/17349

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17446

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17491

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17495

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17631

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/18895

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21253

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015114

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-900

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:209

Source: cve@mitre.org

http://www.osvdb.org/20267

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-823.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/15179

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/19289

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-214A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2005/2182

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3101

Source: cve@mitre.org

https://usn.ubuntu.com/215-1/

Source: cve@mitre.org

http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt