CVE-2002-0146
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages...
CVE-2002-0146 is a medium vulnerability (CVSS 5.0) in Fetchmail, published June 25, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.49%, the 74th percentile. No source names a fixed version.
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
Exploit likelihood
What each source reports
NVD Score used
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
- Record
CVE-2002-0146- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
- Record
CVE-2002-0146- Updated
- 2026-11-02
EUVDEUVD-2002-0146 No score
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
- Record
EUVD-2002-0146- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rg6w-w93w-8gj3 No score
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages...
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
- Record
GHSA-rg6w-w93w-8gj3- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |