Every CVE Search/ Get API key

CVE-2005-4348

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote...

7.8 HighFix available

CVE-2005-4348 is a high vulnerability (CVSS 7.8) in Fetchmail, published December 21, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.64%, the 89th percentile. Fixed in fetchmail 6.3.1-1.

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.

Exploit likelihood

3.64%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.

Record
CVE-2005-4348
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.

Record
CVE-2005-4348
Updated
2026-11-02
EUVDEUVD-2005-4343 No score

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.

Record
EUVD-2005-4343
Updated
2026-11-03
GitHub AdvisoriesGHSA-5g7c-7whj-r862 No score

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote...

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.

Record
GHSA-5g7c-7whj-r862
Updated
2026-11-02
OSV No score

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.

Record
CVE-2005-4348
Updated
2026-11-02
OSVDEBIAN-CVE-2005-4348 No score

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.

Record
DEBIAN-CVE-2005-4348
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fetchmail
Debian:12
 before 6.3.1-1
6.3.1-1
fetchmail
Debian:13
 before 6.3.1-1
6.3.1-1
fetchmail
Debian:14
 before 6.3.1-1
6.3.1-1
fetchmail
Debian:3.1
 before 6.2.5-12sarge4, plus listed versions
6.2.5-126.2.5-12sarge16.2.5-12sarge26.2.5-12sarge3
6.2.5-12sarge4
fetchmail
Red Hat:enterprise_linux:2.1::as
 before 0:5.9.0-21.7.3.el2.1.4
0:5.9.0-21.7.3.el2.1.4
fetchmailconf
Red Hat:enterprise_linux:2.1::as
 before 0:5.9.0-21.7.3.el2.1.4
0:5.9.0-21.7.3.el2.1.4
fetchmail
Red Hat:enterprise_linux:2.1::aw
 before 0:5.9.0-21.7.3.el2.1.4
0:5.9.0-21.7.3.el2.1.4
fetchmailconf
Red Hat:enterprise_linux:2.1::aw
 before 0:5.9.0-21.7.3.el2.1.4
0:5.9.0-21.7.3.el2.1.4
fetchmail
Red Hat:enterprise_linux:2.1::es
 before 0:5.9.0-21.7.3.el2.1.4
0:5.9.0-21.7.3.el2.1.4
fetchmailconf
Red Hat:enterprise_linux:2.1::es
 before 0:5.9.0-21.7.3.el2.1.4
0:5.9.0-21.7.3.el2.1.4
Show 18 moreShow less
Affected packages
PackageAffectedFixed
fetchmail
Red Hat:enterprise_linux:2.1::ws
 before 0:5.9.0-21.7.3.el2.1.4
0:5.9.0-21.7.3.el2.1.4
fetchmailconf
Red Hat:enterprise_linux:2.1::ws
 before 0:5.9.0-21.7.3.el2.1.4
0:5.9.0-21.7.3.el2.1.4
fetchmail
Red Hat:enterprise_linux:3::as
 before 0:6.2.0-3.el3.3
0:6.2.0-3.el3.3
fetchmail-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:6.2.0-3.el3.3
0:6.2.0-3.el3.3
fetchmail
Red Hat:enterprise_linux:3::desktop
 before 0:6.2.0-3.el3.3
0:6.2.0-3.el3.3
fetchmail-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:6.2.0-3.el3.3
0:6.2.0-3.el3.3
fetchmail
Red Hat:enterprise_linux:3::es
 before 0:6.2.0-3.el3.3
0:6.2.0-3.el3.3
fetchmail-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:6.2.0-3.el3.3
0:6.2.0-3.el3.3
fetchmail
Red Hat:enterprise_linux:3::ws
 before 0:6.2.0-3.el3.3
0:6.2.0-3.el3.3
fetchmail-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:6.2.0-3.el3.3
0:6.2.0-3.el3.3
fetchmail
Red Hat:enterprise_linux:4::as
 before 0:6.2.5-6.el4.5
0:6.2.5-6.el4.5
fetchmail-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:6.2.5-6.el4.5
0:6.2.5-6.el4.5
fetchmail
Red Hat:enterprise_linux:4::desktop
 before 0:6.2.5-6.el4.5
0:6.2.5-6.el4.5
fetchmail-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:6.2.5-6.el4.5
0:6.2.5-6.el4.5
fetchmail
Red Hat:enterprise_linux:4::es
 before 0:6.2.5-6.el4.5
0:6.2.5-6.el4.5
fetchmail-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:6.2.5-6.el4.5
0:6.2.5-6.el4.5
fetchmail
Red Hat:enterprise_linux:4::ws
 before 0:6.2.5-6.el4.5
0:6.2.5-6.el4.5
fetchmail-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:6.2.5-6.el4.5
0:6.2.5-6.el4.5

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 39 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open