CVE-2006-5974

Published: Dec 31, 2006Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference when calling the (1) ferror or (2) fflush functions.

Affected (4)

Products: Fetchmail: Fetchmail

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Fetchmail Fetchmail	Version 6.3.5
Fetchmail Fetchmail	Version 6.3.6 rc1
Fetchmail Fetchmail	Version 6.3.6 rc2
Fetchmail Fetchmail	Version 6.3.6 rc3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (36)

http://fedoranews.org/cms/node/2429

Source: cve@mitre.org

http://fetchmail.berlios.de/fetchmail-SA-2006-03.txt

Source: cve@mitre.org

http://osvdb.org/31836

Source: cve@mitre.org

http://secunia.com/advisories/23631

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23804

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23838

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23923

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/24151

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200701-13.xml

Source: cve@mitre.org

http://securitytracker.com/id?1017479

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.517995

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_4_sr.html

Source: cve@mitre.org

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.004.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/456114/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21902

Source: cve@mitre.org

Patch

http://www.trustix.org/errata/2007/0007

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0087

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0088

Source: cve@mitre.org

http://fedoranews.org/cms/node/2429

Source: af854a3a-2127-422b-91ae-364da2661108

http://fetchmail.berlios.de/fetchmail-SA-2006-03.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/31836

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23631

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/23804

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/23838

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/23923

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/24151

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200701-13.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017479

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.517995

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_4_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/456114/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21902

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.trustix.org/errata/2007/0007

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0087

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0088

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.