CVE-2006-0321

Published: Jan 24, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster.

Affected (2)

Products: Fetchmail: Fetchmail

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Fetchmail Fetchmail	Version 6.3.0
Fetchmail Fetchmail	Version 6.3.1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (34)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747

Source: cve@mitre.org

http://developer.berlios.de/project/shownotes.php?release_id=8784

Source: cve@mitre.org

http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt

Source: cve@mitre.org

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html

Source: cve@mitre.org

http://secunia.com/advisories/18571

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/18895

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21253

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015527

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499

Source: cve@mitre.org

http://www.osvdb.org/22691

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/422936/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16365

Source: cve@mitre.org

http://www.securityfocus.com/bid/19289

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-214A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/0300

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3101

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24265

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747

Source: af854a3a-2127-422b-91ae-364da2661108

http://developer.berlios.de/project/shownotes.php?release_id=8784

Source: af854a3a-2127-422b-91ae-364da2661108

http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18571

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/18895

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21253

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1015527

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/22691

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/422936/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16365

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19289

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-214A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/0300

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3101

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24265

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.