| Package | Affected versions | Patched versions |
|---|---|---|
| fetchmail | = 5.0.8= 5.1.0= 5.1.4= 5.2.0= 5.2.1= 5.2.3= 5.2.4= 5.2.7= 5.2.8= 5.3.0= 5.3.1= 5.3.3= 5.3.8= 5.4.0= 5.4.3= 5.4.4= 5.4.5= 5.5.0= 5.5.2= 5.5.3= 5.5.5= 5.5.6= 5.6.0= 5.7.0= 5.7.2= 5.7.4= 5.8= 5.8.1= 5.8.11= 5.8.13= 5.8.14= 5.8.17= 5.8.2= 5.8.3= 5.8.4= 5.8.5= 5.8.6= 5.9.0= 5.9.10= 5.9.11= 5.9.13= 5.9.4= 5.9.5= 5.9.8= 6.0.0= 6.1.0= 6.1.3= 6.2.0= 6.2.1= 6.2.2= 6.2.3= 6.2.4= 6.2.5= 6.2.5.1= 6.2.5.2= 6.2.5.4= 6.2.6= 6.2.9= 6.3.0= 6.3.1= 6.3.10= 6.3.11= 6.3.12= 6.3.13= 6.3.14= 6.3.15= 6.3.16= 6.3.17= 6.3.18= 6.3.19= 6.3.2= 6.3.21= 6.3.3= 6.3.4= 6.3.5= 6.3.6= 6.3.7= 6.3.8= 6.3.9 |
Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free