CVE-2002-1175
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a...
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
Exploit likelihood
What each source reports
NVD Score used
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
CVE-2002-1175- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
CVE-2002-1175- Updated
- 2026-11-02
EUVDEUVD-2002-1159 No score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
EUVD-2002-1159- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-33hc-jm79-92r9 No score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a...
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
GHSA-33hc-jm79-92r9- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
CVE-2002-1175- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1175 No score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
DEBIAN-CVE-2002-1175- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fetchmailDebian:12 |
before 6.1.0-1 | 6.1.0-1 |
fetchmailDebian:13 |
before 6.1.0-1 | 6.1.0-1 |
fetchmailDebian:14 |
before 6.1.0-1 | 6.1.0-1 |
fetchmail-sslDebian:3.0 |
before 5.9.11-6.1 | 5.9.11-6.1 |
fetchmailDebian:3.0 |
before 5.9.11-6.1 | 5.9.11-6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1175 is a medium vulnerability (CVSS 5.0) in Fetchmail, published October 1, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in fetchmail 6.1.0-1.