fetchmail vulnerabilities (Debian)
22 vulnerabilities.
-
fetchmailDebian Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01) 5.3 Medium -
fetchmailDebian In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334... 5.9 Medium -
fetchmailDebian Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such... 5.9 Medium -
fetchmailDebian report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the... 7.5 High -
fetchmailDebian Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM... 5.8 Medium -
fetchmailDebian fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS... 5.0 Medium -
fetchmailDebian fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid... 4.3 Medium -
fetchmailDebian The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose... 6.8 Medium -
fetchmailDebian socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in... 6.4 Medium -
fetchmailDebian fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to... 4.3 Medium -
fetchmailDebian sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service ... 5.0 Medium -
fetchmailDebian The APOP protocol allows remote attackers to guess the first 3 characters of a password via man... 2.6 Low -
fetchmailDebian fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option,... 7.8 High -
fetchmailDebian fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords... 7.8 High -
fetchmailDebian fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of... 5.0 Medium -
fetchmailDebian fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote... 7.8 High -
fetchmailDebian fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with... 2.1 Low -
fetchmailDebian Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to... 5.0 Medium -
fetchmailDebian Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote... 5.0 Medium -
fetchmailDebian Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character... 7.5 High -
fetchmailDebian The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a... 5.0 Medium -
fetchmailDebian Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of... 7.5 High