NVD

Id
64442  
Name
CVE-2006-5867  
Description
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-12-31  
Modified Date
2013-07-04  
Seq
2006-5867  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
336365 64442 CVE-2006-5867 20070201-01-P  View
336366 64442 CVE-2006-5867 http://docs.info.apple.com/article.html?artnum=305391  View
336367 64442 CVE-2006-5867 FEDORA-2007-041  View
336368 64442 CVE-2006-5867 http://fetchmail.berlios.de/fetchmail-SA-2006-02.txt  View
336369 64442 CVE-2006-5867 APPLE-SA-2007-04-19  View
336370 64442 CVE-2006-5867 oval:org.mitre.oval:def:10566  View
336371 64442 CVE-2006-5867 GLSA-200701-13  View
336372 64442 CVE-2006-5867 1017478  View
336373 64442 CVE-2006-5867 SSA:2007-024-01  View
336374 64442 CVE-2006-5867 DSA-1259  View
336375 64442 CVE-2006-5867 MDKSA-2007:016  View
336376 64442 CVE-2006-5867 SUSE-SR:2007:004  View
336377 64442 CVE-2006-5867 OpenPKG-SA-2007.004  View
336378 64442 CVE-2006-5867 RHSA-2007:0018  View
336379 64442 CVE-2006-5867 20070105 fetchmail security announcement 2006-02 (CVE-2006-5867)  View
336380 64442 CVE-2006-5867 20070218 Re: [SECURITY] [DSA 1259-1] New fetchmail packages fix information disclosure  View
336381 64442 CVE-2006-5867 21903  View
336382 64442 CVE-2006-5867 2007-0007  View
336383 64442 CVE-2006-5867 USN-405-1  View
336384 64442 CVE-2006-5867 TA07-109A  View
336385 64442 CVE-2006-5867 ADV-2007-0087  View
336386 64442 CVE-2006-5867 ADV-2007-0088  View
336387 64442 CVE-2006-5867 ADV-2007-1470  View
336388 64442 CVE-2006-5867 https://issues.rpath.com/browse/RPL-919  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51451 JVNDB-2007-000113 Fetchmail の TLS 暗号化未使用によるパスワード漏洩の脆弱性 fetchmail には、特定の状況下において TLS 暗号化の使用を強制しないため、パスワードを平文で送信してしまう脆弱性が存在します。 CVE-2006-5867 21969 CVE-2006-5867 64442 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000113.html 2007-01-31 2007-05-15 View