CVE-2014-7274

概要

参考情報

• lists.opensuse.org/opensuse-updates/2014-10/msg00029.html
• openwall.com/lists/oss-security/2014/10/07/33
• pyropus.ca/software/getmail/CHANGELOG
• secunia.com/advisories/61229
• debian.org/security/2014/dsa-3091

getmail のその他の脆弱性

• CVE-2014-7275中 5.8The POP3-over-SSL implementation in getmail 4.0.0 through 4.44.0 does not verify X.509 certificates from SSL servers, which allows man-in-th…
• CVE-2014-7273中 6.8The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, which allows man-in-th…
• CVE-2004-0881低 2.1getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via …
• CVE-2004-0880低 1.2getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.