CVE

Id
5558  
CVE No.
CVE-2002-1174  
Status
Candidate  
Description
Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readheaders function, or (2) via long Received: headers, which are not properly parsed by the parse_received function.  
Phase
Proposed (20030317)  
Votes
ACCEPT(3) Armstrong, Cole, Green | MODIFY(1) Cox  
Comments
Cox> Addref: REDHAT:RHSA-2002:216  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30276 5558 CVE-2002-1174 VULNWATCH:20020929 Advisory 03/2002: Fetchmail remote vulnerabilities  View
30277 5558 CVE-2002-1174 BUGTRAQ:20020929 Advisory 03/2002: Fetchmail remote vulnerabilities  View
30278 5558 CVE-2002-1174 URL:http://marc.info/?l=bugtraq&m=103340148625187&w=2  View
30279 5558 CVE-2002-1174 MANDRAKE:MDKSA-2002:063  View
30280 5558 CVE-2002-1174 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php  View
30281 5558 CVE-2002-1174 DEBIAN:DSA-171  View
30282 5558 CVE-2002-1174 URL:http://www.debian.org/security/2002/dsa-171  View
30283 5558 CVE-2002-1174 CONECTIVA:CLA-2002:531  View
30284 5558 CVE-2002-1174 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531  View
30285 5558 CVE-2002-1174 REDHAT:RHSA-2002:215  View
30286 5558 CVE-2002-1174 URL:http://rhn.redhat.com/errata/RHSA-2002-215.html  View
30287 5558 CVE-2002-1174 ENGARDE:ESA-20021003-023  View
30288 5558 CVE-2002-1174 URL:http://www.linuxsecurity.com/advisories/other_advisory-2402.html  View
30289 5558 CVE-2002-1174 XF:fetchmail-multidrop-bo(10203)  View
30290 5558 CVE-2002-1174 URL:http://www.iss.net/security_center/static/10203.php  View
30291 5558 CVE-2002-1174 BID:5825  View
30292 5558 CVE-2002-1174 URL:http://www.securityfocus.com/bid/5825  View
30293 5558 CVE-2002-1174 BID:5827  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63903 JVNDB-2002-000230 Fetchmail の "Multidrop" モードにおけるバッファオーバーフローの脆弱性 ------------ CVE-2002-1174 5558 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000230.html  View