|Max CVSS||6.4||Min CVSS||4.3||Total Count||2|
|ID||CVSS||Summary||Last (major) update||Published|
fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference wh
|09-08-2021 - 21:15||16-06-2008 - 21:41|
sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service (NULL dereference and application crash) by refusing certain warning messages that are sent over SMTP.
|15-10-2018 - 21:36||28-08-2007 - 01:17|
socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted cert
|10-10-2018 - 19:41||07-08-2009 - 19:00|