fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list.

The remote Redhat Enterprise Linux 3 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - fetchmail: denial of service in debug mode with multichar locales (CVE-2010-1167)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - fetchmail: Application hang due unguarded blocking I/O in IMAP/POP3 STARTTLS initialization (fetchmail-     SA-2011-01) (CVE-2011-1947)

  - fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in     a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption     and application crash) via a crafted (1) message header or (2) POP3 UIDL list. (CVE-2010-1167)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - fetchmail: DoS (crash) in the base64 decoder upon server NTLM protocol exchange abort right after the     initial request (CVE-2012-3482)

  - fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in     a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption     and application crash) via a crafted (1) message header or (2) POP3 UIDL list. (CVE-2010-1167)

  - fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2)     STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging     the request but not sending additional packets. (CVE-2011-1947)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Multiple vulnerabilities were discovered and corrected in fetchmail :

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list (CVE-2010-1167). NOTE: This vulnerability did not affect Mandriva Linux 2010.2.

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets (CVE-2011-1947).

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149 products_id=490

The updated packages have been upgraded to the 6.3.20 version which is not vulnerable to these issues.

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue.

Fetchmail developer Matthias Andree reported a vulnerability that allows remote attackers to crash the application when it is runs in verbose mode.

Fetchmail before release 6.3.17 did not properly sanitize external input (mail headers and UID). When a multi-character locale (such as UTF-8) was in use, this could cause memory exhaustion and thus a denial of service.

ID	Name	Product	Family	Severity
199119	RHEL 3 : fetchmail (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199038	RHEL 4 : fetchmail (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199021	RHEL 5 : fetchmail (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
54991	Mandriva Linux Security Advisory : fetchmail (MDVSA-2011:107)	Nessus	Mandriva Local Security Checks	medium
46345	Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 8.1 / 9.0 / 9.1 / current : fetchmail (SSA:2010-136-01)	Nessus	Slackware Local Security Checks	medium
45583	FreeBSD : fetchmail -- denial of service vulnerability (09910d76-4c82-11df-83fb-0015587e2cc1)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2010-1167

high

Tenable Plugins

high

high

critical

medium

medium

medium