CVE-2006-5974 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-5974
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5974

Description: fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference when calling the (1) ferror or (2) fflush functions.

CVE Status: Candidate

References: TRUSTIX http://www.trustix.org/errata/2007/0007 SUSE http://www.novell.com/linux/security/advisories/2007_4_sr.html ST 1017479 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.517995 SAID Secunia Advisory: SA24151 Secunia Advisory: SA23923 Secunia Advisory: SA23838 Secunia Advisory: SA23804 Secunia Advisory: SA23631 OSVDB 31836 OPENPKG http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.004.html GENTOO http://security.gentoo.org/glsa/glsa-200701-13.xml FEDORA http://fedoranews.org/cms/node/2429 CONFIRM http://fetchmail.berlios.de/fetchmail-SA-2006-03.txt BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/456114/100/0/threaded BID 21902

Return to the previous page.