NetSight
IP …
medium4.3

CVE-2008-2711

fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persistent mail failure)…

Impact

fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnprintf to format log messages.

Affected products

VendorProductAffected versions
FetchmailFetchmail
through 6.3.8
Versions 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5

Weakness classification

CWE-20

References