CVE-2005-3088
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with...
CVE-2005-3088 is a low vulnerability (CVSS 2.1) in Fetchmail, published October 27, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in fetchmail 6.2.5.4-1.
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
Exploit likelihood
What each source reports
NVD Score used
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
CVE-2005-3088- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
CVE-2005-3088- Updated
- 2026-11-02
EUVDEUVD-2005-3088 No score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
EUVD-2005-3088- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-78m6-w6r4-m4h9 No score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with...
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
GHSA-78m6-w6r4-m4h9- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
CVE-2005-3088- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3088 No score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
DEBIAN-CVE-2005-3088- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fetchmailDebian:12 |
before 6.2.5.4-1 | 6.2.5.4-1 |
fetchmailDebian:13 |
before 6.2.5.4-1 | 6.2.5.4-1 |
fetchmailDebian:14 |
before 6.2.5.4-1 | 6.2.5.4-1 |
fetchmailDebian:3.0 |
before 5.9.11-6.4, plus listed versions 5.9.11-6.25.9.11-6.3 |
5.9.11-6.4 |
fetchmail-sslDebian:3.0 |
before 5.9.11-6.3, plus listed versions 5.9.11-6.2 |
5.9.11-6.3 |
fetchmailDebian:3.1 |
before 6.2.5-12sarge3, plus listed versions 6.2.5-126.2.5-12sarge16.2.5-12sarge2 |
6.2.5-12sarge3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
vupen.com/english/advisories/2005/2182
lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
osvdb.org/20267
secunia.com/advisories/17293
Show 21 moreShow less
securitytracker.com/id?1015114
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499
securityfocus.com/bid/19289
us-cert.gov/cas/techalerts/TA06-214A.html
marc.info?l=bugtraq&m=113042785902031&w=2
fetchmail.berlios.de/fetchmail-SA-2005-02.txt
debian.org/security/2005/dsa-900
redhat.com/support/errata/RHSA-2005-823.html
usn.ubuntu.com/215-1
mandriva.com/security/advisories?name=MDKSA-2005:209
gentoo.org/security/en/glsa/glsa-200511-06.xml
nvd.nist.gov/vuln/detail/CVE-2005-3088
github.com/advisories/GHSA-78m6-w6r4-m4h9
security-tracker.debian.org/tracker/CVE-2005-3088