CVE-2009-2666

Published: Aug 7, 2009Modified: Apr 23, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Affected (117)

Products: Fetchmail: Fetchmail

Fetchmail

1 product

Fetchmail

Configuration A

117 vulnerable

Vulnerable Software	Affected Versions
Fetchmail Fetchmail	Up to 6.3.10
Fetchmail Fetchmail	Version 4.5.1
Fetchmail Fetchmail	Version 4.5.2
Fetchmail Fetchmail	Version 4.5.3
Fetchmail Fetchmail	Version 4.5.4
Fetchmail Fetchmail	Version 4.5.5
Fetchmail Fetchmail	Version 4.5.6
Fetchmail Fetchmail	Version 4.5.7
Fetchmail Fetchmail	Version 4.5.8
Fetchmail Fetchmail	Version 4.6.0
Fetchmail Fetchmail	Version 4.6.1
Fetchmail Fetchmail	Version 4.6.2
Fetchmail Fetchmail	Version 4.6.3
Fetchmail Fetchmail	Version 4.6.4
Fetchmail Fetchmail	Version 4.6.5
Fetchmail Fetchmail	Version 4.6.6
Fetchmail Fetchmail	Version 4.6.7
Fetchmail Fetchmail	Version 4.6.8
Fetchmail Fetchmail	Version 4.6.9
Fetchmail Fetchmail	Version 4.7.0
Fetchmail Fetchmail	Version 4.7.1
Fetchmail Fetchmail	Version 4.7.2
Fetchmail Fetchmail	Version 4.7.3
Fetchmail Fetchmail	Version 4.7.4
Fetchmail Fetchmail	Version 4.7.5
Fetchmail Fetchmail	Version 4.7.6
Fetchmail Fetchmail	Version 4.7.7
Fetchmail Fetchmail	Version 5.0.0
Fetchmail Fetchmail	Version 5.0.1
Fetchmail Fetchmail	Version 5.0.2
Fetchmail Fetchmail	Version 5.0.3
Fetchmail Fetchmail	Version 5.0.4
Fetchmail Fetchmail	Version 5.0.5
Fetchmail Fetchmail	Version 5.0.6
Fetchmail Fetchmail	Version 5.0.7
Fetchmail Fetchmail	Version 5.0.8
Fetchmail Fetchmail	Version 5.1.0
Fetchmail Fetchmail	Version 5.1.4
Fetchmail Fetchmail	Version 5.2.0
Fetchmail Fetchmail	Version 5.2.1
Fetchmail Fetchmail	Version 5.2.3
Fetchmail Fetchmail	Version 5.2.4
Fetchmail Fetchmail	Version 5.2.7
Fetchmail Fetchmail	Version 5.2.8
Fetchmail Fetchmail	Version 5.3.0
Fetchmail Fetchmail	Version 5.3.1
Fetchmail Fetchmail	Version 5.3.3
Fetchmail Fetchmail	Version 5.3.8
Fetchmail Fetchmail	Version 5.4.0
Fetchmail Fetchmail	Version 5.4.3
Fetchmail Fetchmail	Version 5.4.4
Fetchmail Fetchmail	Version 5.4.5
Fetchmail Fetchmail	Version 5.5.0
Fetchmail Fetchmail	Version 5.5.2
Fetchmail Fetchmail	Version 5.5.3
Fetchmail Fetchmail	Version 5.5.5
Fetchmail Fetchmail	Version 5.5.6
Fetchmail Fetchmail	Version 5.6.0
Fetchmail Fetchmail	Version 5.7.0
Fetchmail Fetchmail	Version 5.7.2
Fetchmail Fetchmail	Version 5.7.4
Fetchmail Fetchmail	Version 5.8.11
Fetchmail Fetchmail	Version 5.8.13
Fetchmail Fetchmail	Version 5.8.14
Fetchmail Fetchmail	Version 5.8.17
Fetchmail Fetchmail	Version 5.8.1
Fetchmail Fetchmail	Version 5.8.2
Fetchmail Fetchmail	Version 5.8.3
Fetchmail Fetchmail	Version 5.8.4
Fetchmail Fetchmail	Version 5.8.5
Fetchmail Fetchmail	Version 5.8.6
Fetchmail Fetchmail	Version 5.8
Fetchmail Fetchmail	Version 5.9.0
Fetchmail Fetchmail	Version 5.9.10
Fetchmail Fetchmail	Version 5.9.11
Fetchmail Fetchmail	Version 5.9.13
Fetchmail Fetchmail	Version 5.9.4
Fetchmail Fetchmail	Version 5.9.5
Fetchmail Fetchmail	Version 5.9.8
Fetchmail Fetchmail	Version 6.0.0
Fetchmail Fetchmail	Version 6.1.0
Fetchmail Fetchmail	Version 6.1.3
Fetchmail Fetchmail	Version 6.2.0
Fetchmail Fetchmail	Version 6.2.1
Fetchmail Fetchmail	Version 6.2.2
Fetchmail Fetchmail	Version 6.2.3
Fetchmail Fetchmail	Version 6.2.4
Fetchmail Fetchmail	Version 6.2.5.1
Fetchmail Fetchmail	Version 6.2.5.2
Fetchmail Fetchmail	Version 6.2.5.4
Fetchmail Fetchmail	Version 6.2.5
Fetchmail Fetchmail	Version 6.2.6 pre4
Fetchmail Fetchmail	Version 6.2.6 pre8
Fetchmail Fetchmail	Version 6.2.6 pre9
Fetchmail Fetchmail	Version 6.2.9 rc10
Fetchmail Fetchmail	Version 6.2.9 rc3
Fetchmail Fetchmail	Version 6.2.9 rc4
Fetchmail Fetchmail	Version 6.2.9 rc5
Fetchmail Fetchmail	Version 6.2.9 rc7
Fetchmail Fetchmail	Version 6.2.9 rc8
Fetchmail Fetchmail	Version 6.2.9 rc9
Fetchmail Fetchmail	Version 6.3.0
Fetchmail Fetchmail	Version 6.3.1
Fetchmail Fetchmail	Version 6.3.2
Fetchmail Fetchmail	Version 6.3.3
Fetchmail Fetchmail	Version 6.3.4
Fetchmail Fetchmail	Version 6.3.5
Fetchmail Fetchmail	Version 6.3.6
Fetchmail Fetchmail	Version 6.3.6 rc1
Fetchmail Fetchmail	Version 6.3.6 rc2
Fetchmail Fetchmail	Version 6.3.6 rc3
Fetchmail Fetchmail	Version 6.3.6 rc4
Fetchmail Fetchmail	Version 6.3.6 rc5
Fetchmail Fetchmail	Version 6.3.7
Fetchmail Fetchmail	Version 6.3.8
Fetchmail Fetchmail	Version 6.3.9
Fetchmail Fetchmail	Version 6.3.9 rc2