CVE

Id
5559  
CVE No.
CVE-2002-1175  
Status
Candidate  
Description
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.  
Phase
Proposed (20030317)  
Votes
ACCEPT(3) Armstrong, Cole, Green | MODIFY(1) Cox  
Comments
Cox> Addref: REDHAT:RHSA-2002:216  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30294 5559 CVE-2002-1175 VULNWATCH:20020929 Advisory 03/2002: Fetchmail remote vulnerabilities  View
30295 5559 CVE-2002-1175 BUGTRAQ:20020929 Advisory 03/2002: Fetchmail remote vulnerabilities  View
30296 5559 CVE-2002-1175 URL:http://marc.info/?l=bugtraq&m=103340148625187&w=2  View
30297 5559 CVE-2002-1175 MANDRAKE:MDKSA-2002:063  View
30298 5559 CVE-2002-1175 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php  View
30299 5559 CVE-2002-1175 DEBIAN:DSA-171  View
30300 5559 CVE-2002-1175 URL:http://www.debian.org/security/2002/dsa-171  View
30301 5559 CVE-2002-1175 CONECTIVA:CLA-2002:531  View
30302 5559 CVE-2002-1175 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531  View
30303 5559 CVE-2002-1175 REDHAT:RHSA-2002:215  View
30304 5559 CVE-2002-1175 URL:http://rhn.redhat.com/errata/RHSA-2002-215.html  View
30305 5559 CVE-2002-1175 ENGARDE:ESA-20021003-023  View
30306 5559 CVE-2002-1175 URL:http://www.linuxsecurity.com/advisories/other_advisory-2402.html  View
30307 5559 CVE-2002-1175 XF:fetchmail-multidrop-bo(10203)  View
30308 5559 CVE-2002-1175 URL:http://www.iss.net/security_center/static/10203.php  View
30309 5559 CVE-2002-1175 BID:5826  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63904 JVNDB-2002-000231 Fetchmail の "Multidrop" モードにおけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2002-1175 5559 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000231.html  View