CVE-2006-0321: Input Validation
Published Jan 24, 2006
·Updated
fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster.
Affected Software
2 affected components
Fetchmail Fetchmail=6.3.0
Fetchmail Fetchmail=6.3.1
Remediation
Patch Available
Event History
Jan 24, 2006
CVE Published
12:03 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0321?
CVE-2006-0321 is classified as a denial of service vulnerability that can crash the fetchmail application.
2
How do I fix CVE-2006-0321?
To fix CVE-2006-0321, upgrade to fetchmail version 6.3.2 or later.
3
What versions of fetchmail are affected by CVE-2006-0321?
Versions 6.3.0 and 6.3.1 of fetchmail are affected by CVE-2006-0321.
4
Can CVE-2006-0321 be exploited remotely?
Yes, CVE-2006-0321 can be exploited by remote attackers through specially crafted email messages.
5
What impact does CVE-2006-0321 have on the system?
CVE-2006-0321 causes the fetchmail application to crash, resulting in a denial of service.