CVE-2002-1175
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a...
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
Exploit likelihood
What each source reports
NVD Score used
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
CVE-2002-1175- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
CVE-2002-1175- Updated
- 2026-11-02
EUVDEUVD-2002-1159No score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
EUVD-2002-1159- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-33hc-jm79-92r9No score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a...
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
GHSA-33hc-jm79-92r9- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
CVE-2002-1175- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1175No score
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
- Record
DEBIAN-CVE-2002-1175- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fetchmailDebian:12 | before 6.1.0-1 | 6.1.0-1 |
fetchmailDebian:13 | before 6.1.0-1 | 6.1.0-1 |
fetchmailDebian:14 | before 6.1.0-1 | 6.1.0-1 |
fetchmail-sslDebian:3.0 From an advisory covering 2 CVEs | before 5.9.11-6.1 | 5.9.11-6.1 |
fetchmailDebian:3.0 From an advisory covering 2 CVEs | before 5.9.11-6.1 | 5.9.11-6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1175 is a medium vulnerability (CVSS 5.0) in Fetchmail, published October 1, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in fetchmail 6.1.0-1.