Family: Red Hat Local Security Checks --> Category: infos
RHSA-2005-640: fetchmail Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the fetchmail packages
Detailed Explanation for this Vulnerability Test
Updated fetchmail packages that fix a security flaw are now available.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Fetchmail is a remote mail retrieval and forwarding utility.
A buffer overflow was discovered in fetchmail's POP3 client. A malicious
server could cause send a carefully crafted message UID and cause fetchmail
to crash or potentially execute arbitrary code as the user running
fetchmail. The Common Vulnerabilities and Exposures project assigned the
name CVE-2005-2335 to this issue.
Users of fetchmail should update to this erratum package which contains a
backported patch to correct this issue.
Solution : http://rhn.redhat.com/errata/RHSA-2005-640.html
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.