CVE-2005-4348: High severity Fetchmail Fetchmail vulnerability
Published Dec 21, 2005
·Updated
fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.
Affected Software
2 affected components
Fetchmail Fetchmail>=6.2.0<6.2.5.5
Fetchmail Fetchmail>=6.3.0<6.3.1
Event History
Dec 21, 2005
CVE Published
12:03 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4348?
CVE-2005-4348 is considered a medium-severity vulnerability as it can lead to a denial of service.
2
How do I fix CVE-2005-4348?
To fix CVE-2005-4348, upgrade to fetchmail version 6.3.1 or 6.2.5.6 or later.
3
What vulnerability does CVE-2005-4348 exploit?
CVE-2005-4348 exploits a flaw in fetchmail's multidrop mode handling, allowing remote attackers to crash the application.
4
What versions of fetchmail are affected by CVE-2005-4348?
Fetchmail versions prior to 6.3.1 and 6.2.5.5 are affected by CVE-2005-4348.
5
Can CVE-2005-4348 be exploited remotely?
Yes, CVE-2005-4348 can be exploited remotely by sending malformed messages without headers.