Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2005:126: fetchmail Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the fetchmail package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2005:126 (fetchmail).
A buffer overflow was discovered in fetchmail's POP3 client which could allow a
malicious server to send a carefully crafted message UID, causing fetchmail to
crash or potentially execute arbitrary code as the user running fetchmail.
The updated packages have been patched to address this problem.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:126
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.