Multiple vulnerabilities have been discovered in Fetchmail, the worst of which could result in email disclosure to third parties.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-mail/fetchmail | * | < 6.4.22 | >= 6.4.22 |
Fetchmail is a remote mail retrieval and forwarding utility.
Multiple vulnerabilities have been discovered in Fetchmail. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Fetchmail users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/fetchmail-6.4.22"
Multiple vulnerabilities have been reported in Fetchmail, allowing remote attackers to execute arbitrary code or to conduct Man-in-the-Middle attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-mail/fetchmail | * | < 6.3.14 | >= 6.3.14 |
Fetchmail is a remote mail retrieval and forwarding utility.
Multiple vulnerabilities have been reported in Fetchmail:
A remote attacker could entice a user to connect with Fetchmail to a specially crafted SSL-enabled server in verbose mode, possibly resulting in the execution of arbitrary code with the privileges of the user running the application. NOTE: The issue is only existent on platforms on which char is signed.
Furthermore, a remote attacker might employ a specially crafted X.509 certificate, containing a NUL character in the Common Name field to conduct man-in-the-middle attacks on SSL connections made using Fetchmail.
There is no known workaround at this time.
All Fetchmail users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/fetchmail-6.3.14"
Fetchmail has been found to have numerous vulnerabilities allowing for Denial of Service and password disclosure.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-mail/fetchmail | * | < 6.3.6 | >= 6.3.6 |
Fetchmail is a remote mail retrieval and forwarding utility.
Neil Hoggarth has discovered that when delivering messages to a message delivery agent by means of the "mda" option, Fetchmail passes a NULL pointer to the ferror() and fflush() functions when refusing a message. Isaac Wilcox has discovered numerous means of plain-text password disclosure due to errors in secure connection establishment.
An attacker could deliver a message via Fetchmail to a message delivery agent configured to refuse the message, and crash the Fetchmail process. SMTP and LMTP delivery modes are not affected by this vulnerability. An attacker could also perform a Man-in-the-Middle attack, and obtain plain-text authentication credentials of users connecting to a Fetchmail process.
There is no known workaround at this time.
All fetchmail users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/fetchmail-6.3.6"
fetchmailconf fails to properly handle file permissions, temporarily exposing sensitive information to other local users.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-mail/fetchmail | * | < 6.2.5.2-r1 | >= 6.2.5.2-r1 |
fetchmail is a utility that retrieves and forwards mail from remote systems using IMAP, POP, and other protocols. It ships with fetchmailconf, a graphical utility used to create configuration files.
Thomas Wolff discovered that fetchmailconf opens the configuration file with default permissions, writes the configuration to it, and only then restricts read permissions to the owner.
A local attacker could exploit the race condition to retrieve sensitive information like IMAP/POP passwords.
Run "umask 077" to temporarily strengthen default permissions, then run "fetchmailconf" from the same shell.
All fetchmail users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/fetchmail-6.2.5.2-r1"
fetchmail is susceptible to a buffer overflow resulting in a Denial of Service or arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-mail/fetchmail | * | < 6.2.5.2 | >= 6.2.5.2 |
fetchmail is a utility that retrieves and forwards mail from remote systems using IMAP, POP, and other protocols.
fetchmail does not properly validate UIDs coming from a POP3 mail server. The UID is placed in a fixed length buffer on the stack, which can be overflown.
Very long UIDs returned from a malicious or compromised POP3 server can cause fetchmail to crash, resulting in a Denial of Service, or allow arbitrary code to be placed on the stack.
There are no known workarounds at this time.
All fetchmail users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/fetchmail-6.2.5.2"
Fetchmail versions 6.2.4 and earlier can be crashed by sending a specially-crafted email to a fetchmail user.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-mail/fetchmail | * | <= 6.2.4 | >= 6.2.5 |
Fetchmail is a utility that retrieves and forwards mail from remote systems using IMAP, POP, and other protocols.
Fetchmail versions 6.2.4 and earlier can be crashed by sending a specially-crafted email to a fetchmail user. This problem occurs because Fetchmail does not properly allocate memory for long lines in an incoming email.
Fetchmail users who receive a malicious email may have their fetchmail program crash.
While a workaround is not currently known for this issue, all users are advised to upgrade to the latest version of fetchmail.
Fetchmail users should upgrade to version 6.2.5 or later:
# emerge sync # emerge -pv ">=net-mail/fetchmail-6.2.5" # emerge ">=net-mail/fetchmail-6.2.5"