NetSight
IP …
medium5.0

CVE-2002-1175

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, …

Impact

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.

Affected products

VendorProductAffected versions
FetchmailFetchmail
through 6.0.0
Versions 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5

Weakness classification

CWE-20

References