NetSight
medium5.0

CVE-2002-0146

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory vi…

Impact

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.

Affected products

VendorProductAffected versions
FetchmailFetchmail
through 5.9.8
Versions 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5

Weakness classification

References