NVD

Id
80318  
Name
CVE-2002-1365  
Description
Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-12-23  
Modified Date
2016-10-17  
Seq
2002-1365  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
400485 80318 CVE-2002-1365 CSSA-2003-001.0  View
400486 80318 CVE-2002-1365 CLA-2002:554  View
400487 80318 CVE-2002-1365 20021213 Advisory 05/2002: Another Fetchmail Remote Vulnerability  View
400488 80318 CVE-2002-1365 20021215 GLSA: fetchmail  View
400489 80318 CVE-2002-1365 http://security.e-matters.de/advisories/052002.html  View
400490 80318 CVE-2002-1365 DSA-216  View
400491 80318 CVE-2002-1365 MDKSA-2003:011  View
400492 80318 CVE-2002-1365 RHSA-2002:293  View
400493 80318 CVE-2002-1365 RHSA-2002:294  View
400494 80318 CVE-2002-1365 RHSA-2003:155  View
400495 80318 CVE-2002-1365 6390  View
400496 80318 CVE-2002-1365 fetchmail-address-header-bo(10839)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63994 JVNDB-2002-000321 Red Hat Linux の Fetchmail におけるヒープオーバーフローの脆弱性 Red Hat Linux の Fetchmail には、ローカルアドレスの特定の文字の処理に不備があり、 ヘッダを意図的に作成したメールを送信することにより、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2002-1365 5749 CVE-2002-1365 80318 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000321.html 2002-12-13 2007-04-01 View