CVE Vulnerabilities

CVE-2011-1947

Published: Jun 02, 2011 | Modified: Oct 09, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.

Affected Software

Name Vendor Start Version End Version
Fetchmail Fetchmail 6.3.5 6.3.5
Fetchmail Fetchmail 6.3.7 6.3.7
Fetchmail Fetchmail 6.2.0 6.2.0
Fetchmail Fetchmail 6.0.0 6.0.0
Fetchmail Fetchmail 6.3.14 6.3.14
Fetchmail Fetchmail 6.2.1 6.2.1
Fetchmail Fetchmail 5.9.10 5.9.10
Fetchmail Fetchmail 6.2.5.1 6.2.5.1
Fetchmail Fetchmail 6.3.12 6.3.12
Fetchmail Fetchmail 6.3.6 6.3.6
Fetchmail Fetchmail 6.2.9 6.2.9
Fetchmail Fetchmail 6.2.6 6.2.6
Fetchmail Fetchmail 6.2.9 6.2.9
Fetchmail Fetchmail 6.2.9 6.2.9
Fetchmail Fetchmail 5.9.13 5.9.13
Fetchmail Fetchmail 6.2.9 6.2.9
Fetchmail Fetchmail 6.3.2 6.3.2
Fetchmail Fetchmail 6.3.0 6.3.0
Fetchmail Fetchmail 6.3.11 6.3.11
Fetchmail Fetchmail 5.9.11 5.9.11
Fetchmail Fetchmail 6.3.17 6.3.17
Fetchmail Fetchmail 6.2.9 6.2.9
Fetchmail Fetchmail 6.1.0 6.1.0
Fetchmail Fetchmail 6.3.8 6.3.8
Fetchmail Fetchmail 6.2.5.4 6.2.5.4
Fetchmail Fetchmail 6.3.6 6.3.6
Fetchmail Fetchmail 6.3.6 6.3.6
Fetchmail Fetchmail 6.2.6 6.2.6
Fetchmail Fetchmail 6.2.2 6.2.2
Fetchmail Fetchmail 6.3.18 6.3.18
Fetchmail Fetchmail 6.3.9 6.3.9
Fetchmail Fetchmail 6.3.3 6.3.3
Fetchmail Fetchmail 6.2.4 6.2.4
Fetchmail Fetchmail 6.3.9 6.3.9
Fetchmail Fetchmail 6.3.15 6.3.15
Fetchmail Fetchmail 6.2.6 6.2.6
Fetchmail Fetchmail 6.3.6 6.3.6
Fetchmail Fetchmail 6.2.5.2 6.2.5.2
Fetchmail Fetchmail 6.2.5 6.2.5
Fetchmail Fetchmail 5.9.9 5.9.9
Fetchmail Fetchmail 6.3.4 6.3.4
Fetchmail Fetchmail 6.2.9 6.2.9
Fetchmail Fetchmail 6.3.16 6.3.16
Fetchmail Fetchmail 6.3.6 6.3.6
Fetchmail Fetchmail 6.3.19 6.3.19
Fetchmail Fetchmail 6.2.9 6.2.9
Fetchmail Fetchmail 6.1.3 6.1.3
Fetchmail Fetchmail 6.3.6 6.3.6
Fetchmail Fetchmail 6.2.3 6.2.3
Fetchmail Fetchmail 6.3.13 6.3.13
Fetchmail Fetchmail 6.3.1 6.3.1
Fetchmail Fetchmail 6.3.10 6.3.10

References