Paketname
fetchmail
Datum
2002-05-28
Advisory ID
MDKSA-2002:036
Betroffene Versionen
8.1 i586 , SNF7.2 i586 , CS1.0 i586 , 8.1 i586 , 8.0 i586 , 8.2 i586 , 8.0 i586 , 8.2 i586 , 7.1 i586 , 7.2 i586

Problembeschreibung

A problem was discovered with versions of fetchmail prior to 5.9.10 that was triggered by retreiving mail from an IMAP server. The fetchmail client will allocate an array to store the sizes of the messages it is attempting to retrieve. This array size is determined by the number of messages the server is claiming to have, and fetchmail would not check whether or not the number of messages the server was claiming was too high. This would allow a malicious server to make the fetchmail process write data outside of the array bounds.

Aktualisierte Pakete

8.1 i586

 b2b76666dfefcdc7c7cd9a5a6af4dcf6  ia64/8.1/RPMS/fetchmail-5.9.11-6.1mdk.ia64.rpm
39a36395bc99838bc11ec879bc440b7e  ia64/8.1/RPMS/fetchmail-daemon-5.9.11-6.1mdk.ia64.rpm
861a24a875774b5b1909e0183e4e2800  ia64/8.1/RPMS/fetchmailconf-5.9.11-6.1mdk.ia64.rpm
cb8ef81db890acd371dcb33aa2ebe6de  ia64/8.1/SRPMS/fetchmail-5.9.11-6.1mdk.src.rpm

SNF7.2 i586

 793e5dbc2794b53a97a3c9fa1a74b1ac  snf7.2/RPMS/fetchmail-5.9.11-6.3mdk.i586.rpm
c8a84bf6328bcacdfc0f55116297683c  snf7.2/RPMS/fetchmail-daemon-5.9.11-6.3mdk.i586.rpm
1a7c8241a9240181d161b0267b8fd173  snf7.2/RPMS/fetchmailconf-5.9.11-6.3mdk.i586.rpm
2d1746b747d2e15ebde5e38818dfd9d3  snf7.2/SRPMS/fetchmail-5.9.11-6.3mdk.src.rpm

CS1.0 i586

 7d56a6a399067a29590130a7abdf10ea  1.0.1/RPMS/fetchmail-5.9.11-6.3mdk.i586.rpm
9640cc29c99b269c83a95ec4f751a443  1.0.1/RPMS/fetchmail-daemon-5.9.11-6.3mdk.i586.rpm
e518dbf81590b0ad051bff74f754108b  1.0.1/RPMS/fetchmailconf-5.9.11-6.3mdk.i586.rpm
2d1746b747d2e15ebde5e38818dfd9d3  1.0.1/SRPMS/fetchmail-5.9.11-6.3mdk.src.rpm

8.1 i586

 4898601d4dc3b0817c086471c6dae63b  8.1/RPMS/fetchmail-5.9.11-6.1mdk.i586.rpm
c0d4699ab51d3ff137e147fc7975a4e7  8.1/RPMS/fetchmail-daemon-5.9.11-6.1mdk.i586.rpm
9729b1fc2eacf9f2bd8041777f1d7b61  8.1/RPMS/fetchmailconf-5.9.11-6.1mdk.i586.rpm
cb8ef81db890acd371dcb33aa2ebe6de  8.1/SRPMS/fetchmail-5.9.11-6.1mdk.src.rpm

8.0 i586

 448a2fbd10d3293ab0103042f9b081d4  8.0/RPMS/fetchmail-5.9.11-6.2mdk.i586.rpm
de7dd5b01e1c3ec9e4671dd307d2a5d9  8.0/RPMS/fetchmail-daemon-5.9.11-6.2mdk.i586.rpm
3e3b7a6282edb91c5135aa6def572c30  8.0/RPMS/fetchmailconf-5.9.11-6.2mdk.i586.rpm
55472afac0c20e6e54a43253033ebe86  8.0/SRPMS/fetchmail-5.9.11-6.2mdk.src.rpm

8.2 i586

 62ae12e980691928fb97a53665ea8aec  8.2/RPMS/fetchmail-5.9.11-6.1mdk.i586.rpm
2421a5a2606b79e9e0c2a4336d7314e2  8.2/RPMS/fetchmail-daemon-5.9.11-6.1mdk.i586.rpm
aa06981d47199bce1d67ae6dee07581e  8.2/RPMS/fetchmailconf-5.9.11-6.1mdk.i586.rpm
cb8ef81db890acd371dcb33aa2ebe6de  8.2/SRPMS/fetchmail-5.9.11-6.1mdk.src.rpm

8.0 i586

 3611971839b8bf8a6cec79fbc9249cef  ppc/8.0/RPMS/fetchmail-5.9.11-6.2mdk.ppc.rpm
165e34787599286fbb2d3e0e35976c88  ppc/8.0/RPMS/fetchmail-daemon-5.9.11-6.2mdk.ppc.rpm
024cbefd38d08a79ea06b148cb1ce7f6  ppc/8.0/RPMS/fetchmailconf-5.9.11-6.2mdk.ppc.rpm
55472afac0c20e6e54a43253033ebe86  ppc/8.0/SRPMS/fetchmail-5.9.11-6.2mdk.src.rpm

8.2 i586

 37635484ed14a2fbdf47b994b0585cd1  ppc/8.2/RPMS/fetchmail-5.9.11-6.1mdk.ppc.rpm
1ed404313a81f45cbceeeb6f9a69a9dc  ppc/8.2/RPMS/fetchmail-daemon-5.9.11-6.1mdk.ppc.rpm
2cc2ff390df4fe3b3294cd91a7789c8a  ppc/8.2/RPMS/fetchmailconf-5.9.11-6.1mdk.ppc.rpm
cb8ef81db890acd371dcb33aa2ebe6de  ppc/8.2/SRPMS/fetchmail-5.9.11-6.1mdk.src.rpm

7.1 i586

 7d56a6a399067a29590130a7abdf10ea  7.1/RPMS/fetchmail-5.9.11-6.3mdk.i586.rpm
9640cc29c99b269c83a95ec4f751a443  7.1/RPMS/fetchmail-daemon-5.9.11-6.3mdk.i586.rpm
e518dbf81590b0ad051bff74f754108b  7.1/RPMS/fetchmailconf-5.9.11-6.3mdk.i586.rpm
2d1746b747d2e15ebde5e38818dfd9d3  7.1/SRPMS/fetchmail-5.9.11-6.3mdk.src.rpm

7.2 i586

 793e5dbc2794b53a97a3c9fa1a74b1ac  7.2/RPMS/fetchmail-5.9.11-6.3mdk.i586.rpm
c8a84bf6328bcacdfc0f55116297683c  7.2/RPMS/fetchmail-daemon-5.9.11-6.3mdk.i586.rpm
1a7c8241a9240181d161b0267b8fd173  7.2/RPMS/fetchmailconf-5.9.11-6.3mdk.i586.rpm
2d1746b747d2e15ebde5e38818dfd9d3  7.2/SRPMS/fetchmail-5.9.11-6.3mdk.src.rpm

Referenzen