CVE-2005-3088
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with...
CVE-2005-3088 is a low vulnerability (CVSS 2.1) in Fetchmail, published October 27, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in fetchmail 6.2.5.4-1.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.45%EPSS, 39th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
6.2.5.4-1fetchmail +5 more
Description
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fetchmailDebian:12 | before 6.2.5.4-1 | 6.2.5.4-1 |
fetchmailDebian:13 | before 6.2.5.4-1 | 6.2.5.4-1 |
fetchmailDebian:14 | before 6.2.5.4-1 | 6.2.5.4-1 |
fetchmailDebian:3.0 | before 5.9.11-6.4, plus listed versions 5.9.11-6.25.9.11-6.3 | 5.9.11-6.4 |
fetchmail-sslDebian:3.0 | before 5.9.11-6.3, plus listed versions 5.9.11-6.2 | 5.9.11-6.3 |
fetchmailDebian:3.1 | before 6.2.5-12sarge3, plus listed versions 6.2.5-126.2.5-12sarge16.2.5-12sarge2 | 6.2.5-12sarge3 |
What each source reports
NVD Score used
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
CVE-2005-3088- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
CVE-2005-3088- Updated
- 2026-11-02
EUVDEUVD-2005-3088No score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
EUVD-2005-3088- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-78m6-w6r4-m4h9No score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with...
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
GHSA-78m6-w6r4-m4h9- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVNo score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
CVE-2005-3088- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3088No score
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
- Record
DEBIAN-CVE-2005-3088- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2005/2182
lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
osvdb.org/20267
secunia.com/advisories/17293
Show 21 moreShow less
securitytracker.com/id?1015114
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499
securityfocus.com/bid/19289
us-cert.gov/cas/techalerts/TA06-214A.html
marc.info?l=bugtraq&m=113042785902031&w=2
fetchmail.berlios.de/fetchmail-SA-2005-02.txt
debian.org/security/2005/dsa-900
redhat.com/support/errata/RHSA-2005-823.html
usn.ubuntu.com/215-1
mandriva.com/security/advisories?name=MDKSA-2005:209
gentoo.org/security/en/glsa/glsa-200511-06.xml
nvd.nist.gov/vuln/detail/CVE-2005-3088
github.com/advisories/GHSA-78m6-w6r4-m4h9
security-tracker.debian.org/tracker/CVE-2005-3088