Gentoo: GLSA-202310-12 Critical: Fetchmail Buffer Overflow Risk

Gentoo Linux Security Advisory GLSA 200507-21 https://security.gentoo.org/ Severity: Normal Title: fetchmail: Buffer Overflow Date: July 25, 2005 Bugs: #99865 ID: 200507-21

Synopsis ======= fetchmail is susceptible to a buffer overflow resulting in a Denial of Service or arbitrary code execution.
Background ========= fetchmail is a utility that retrieves and forwards mail from remote systems using IMAP, POP, and other protocols.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-mail/fetchmail < 6.2.5.2 >= 6.2.5.2
========== fetchmail does not properly validate UIDs coming from a POP3 mail server. The UID is placed in a fixed length buffer on the stack, whic...