Fetchmail vulnerabilities

Products

• Fetchmail 25

Newest

• fetchmail In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334... CVE-2025-61962 Fix available 5.9 MediumOctober 4, 2025
• fetchmail, fedoraproject fedora +1 more Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such... CVE-2021-39272 Fix available 5.9 MediumAugust 30, 2021
• fetchmail, fedoraproject fedora +1 more report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the... CVE-2021-36386 Fix available 7.5 HighJuly 29, 2021
• fetchmail Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM... CVE-2012-3482 Fix available 5.8 MediumDecember 21, 2012
• fetchmail fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS... CVE-2011-1947 Fix available 5.0 MediumJune 2, 2011
• fetchmail fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid... CVE-2010-1167 Fix available 4.3 MediumMay 7, 2010
• fetchmail The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose... CVE-2010-0562 Fix available 6.8 MediumFebruary 8, 2010
• fetchmail socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in... CVE-2009-2666 Fix available 6.4 MediumAugust 7, 2009
• fetchmail fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to... CVE-2008-2711 Fix available 4.3 MediumJune 16, 2008
• fetchmail sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service ... CVE-2007-4565 Fix available 5.0 MediumAugust 28, 2007
• fetchmail fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option,... CVE-2006-5974 Fix available 7.8 HighDecember 31, 2006
• fetchmail fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords... CVE-2006-5867 Fix available 7.8 HighDecember 31, 2006
• fetchmail fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of... CVE-2006-0321 Fix available 5.0 MediumJanuary 24, 2006
• fetchmail fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote... CVE-2005-4348 Fix available 7.8 HighDecember 21, 2005
• fetchmail fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with... CVE-2005-3088 Fix available 2.1 LowOctober 27, 2005
• fetchmail Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to... CVE-2005-2335 Fix available 5.0 MediumJuly 27, 2005
• fetchmail Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote... CVE-2003-0792 Fix available 5.0 MediumOctober 21, 2003
• fetchmail Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character... CVE-2002-1365 Fix available 7.5 HighDecember 23, 2002
• fetchmail The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a... CVE-2002-1175 Fix available 5.0 MediumOctober 1, 2002
• fetchmail Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of... CVE-2002-1174 Fix available 7.5 HighOctober 1, 2002
• fetchmail fetchmail email client before 5.9.10 does not properly limit the maximum number of messages... CVE-2002-0146 5.0 MediumJune 25, 2002
• fetchmail A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary... CVE-2001-0819 7.5 HighDecember 6, 2001
• fetchmail fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via... CVE-2001-1378 2.1 LowSeptember 6, 2001
• fetchmail Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP... CVE-2001-1009 Public exploit 10.0 HighAugust 31, 2001
• fetchmail Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command. CVE-2001-0101 10.0 HighFebruary 2, 2001