MDKSA-2002:036
- Nom du paquet
- fetchmail
- Date
- 2002-05-28
- Advisory ID
- MDKSA-2002:036
- Affected versions
- 8.1 i586 , SNF7.2 i586 , CS1.0 i586 , 8.1 i586 , 8.0 i586 , 8.2 i586 , 8.0 i586 , 8.2 i586 , 7.1 i586 , 7.2 i586
Problem description
A problem was discovered with versions of fetchmail prior to 5.9.10 that was triggered by retreiving mail from an IMAP server. The fetchmail client will allocate an array to store the sizes of the messages it is attempting to retrieve. This array size is determined by the number of messages the server is claiming to have, and fetchmail would not check whether or not the number of messages the server was claiming was too high. This would allow a malicious server to make the fetchmail process write data outside of the array bounds.
Updated packages
8.1 i586
b2b76666dfefcdc7c7cd9a5a6af4dcf6 ia64/8.1/RPMS/fetchmail-5.9.11-6.1mdk.ia64.rpm 39a36395bc99838bc11ec879bc440b7e ia64/8.1/RPMS/fetchmail-daemon-5.9.11-6.1mdk.ia64.rpm 861a24a875774b5b1909e0183e4e2800 ia64/8.1/RPMS/fetchmailconf-5.9.11-6.1mdk.ia64.rpm cb8ef81db890acd371dcb33aa2ebe6de ia64/8.1/SRPMS/fetchmail-5.9.11-6.1mdk.src.rpm
SNF7.2 i586
793e5dbc2794b53a97a3c9fa1a74b1ac snf7.2/RPMS/fetchmail-5.9.11-6.3mdk.i586.rpm c8a84bf6328bcacdfc0f55116297683c snf7.2/RPMS/fetchmail-daemon-5.9.11-6.3mdk.i586.rpm 1a7c8241a9240181d161b0267b8fd173 snf7.2/RPMS/fetchmailconf-5.9.11-6.3mdk.i586.rpm 2d1746b747d2e15ebde5e38818dfd9d3 snf7.2/SRPMS/fetchmail-5.9.11-6.3mdk.src.rpm
CS1.0 i586
7d56a6a399067a29590130a7abdf10ea 1.0.1/RPMS/fetchmail-5.9.11-6.3mdk.i586.rpm 9640cc29c99b269c83a95ec4f751a443 1.0.1/RPMS/fetchmail-daemon-5.9.11-6.3mdk.i586.rpm e518dbf81590b0ad051bff74f754108b 1.0.1/RPMS/fetchmailconf-5.9.11-6.3mdk.i586.rpm 2d1746b747d2e15ebde5e38818dfd9d3 1.0.1/SRPMS/fetchmail-5.9.11-6.3mdk.src.rpm
8.1 i586
4898601d4dc3b0817c086471c6dae63b 8.1/RPMS/fetchmail-5.9.11-6.1mdk.i586.rpm c0d4699ab51d3ff137e147fc7975a4e7 8.1/RPMS/fetchmail-daemon-5.9.11-6.1mdk.i586.rpm 9729b1fc2eacf9f2bd8041777f1d7b61 8.1/RPMS/fetchmailconf-5.9.11-6.1mdk.i586.rpm cb8ef81db890acd371dcb33aa2ebe6de 8.1/SRPMS/fetchmail-5.9.11-6.1mdk.src.rpm
8.0 i586
448a2fbd10d3293ab0103042f9b081d4 8.0/RPMS/fetchmail-5.9.11-6.2mdk.i586.rpm de7dd5b01e1c3ec9e4671dd307d2a5d9 8.0/RPMS/fetchmail-daemon-5.9.11-6.2mdk.i586.rpm 3e3b7a6282edb91c5135aa6def572c30 8.0/RPMS/fetchmailconf-5.9.11-6.2mdk.i586.rpm 55472afac0c20e6e54a43253033ebe86 8.0/SRPMS/fetchmail-5.9.11-6.2mdk.src.rpm
8.2 i586
62ae12e980691928fb97a53665ea8aec 8.2/RPMS/fetchmail-5.9.11-6.1mdk.i586.rpm 2421a5a2606b79e9e0c2a4336d7314e2 8.2/RPMS/fetchmail-daemon-5.9.11-6.1mdk.i586.rpm aa06981d47199bce1d67ae6dee07581e 8.2/RPMS/fetchmailconf-5.9.11-6.1mdk.i586.rpm cb8ef81db890acd371dcb33aa2ebe6de 8.2/SRPMS/fetchmail-5.9.11-6.1mdk.src.rpm
8.0 i586
3611971839b8bf8a6cec79fbc9249cef ppc/8.0/RPMS/fetchmail-5.9.11-6.2mdk.ppc.rpm 165e34787599286fbb2d3e0e35976c88 ppc/8.0/RPMS/fetchmail-daemon-5.9.11-6.2mdk.ppc.rpm 024cbefd38d08a79ea06b148cb1ce7f6 ppc/8.0/RPMS/fetchmailconf-5.9.11-6.2mdk.ppc.rpm 55472afac0c20e6e54a43253033ebe86 ppc/8.0/SRPMS/fetchmail-5.9.11-6.2mdk.src.rpm
8.2 i586
37635484ed14a2fbdf47b994b0585cd1 ppc/8.2/RPMS/fetchmail-5.9.11-6.1mdk.ppc.rpm 1ed404313a81f45cbceeeb6f9a69a9dc ppc/8.2/RPMS/fetchmail-daemon-5.9.11-6.1mdk.ppc.rpm 2cc2ff390df4fe3b3294cd91a7789c8a ppc/8.2/RPMS/fetchmailconf-5.9.11-6.1mdk.ppc.rpm cb8ef81db890acd371dcb33aa2ebe6de ppc/8.2/SRPMS/fetchmail-5.9.11-6.1mdk.src.rpm
7.1 i586
7d56a6a399067a29590130a7abdf10ea 7.1/RPMS/fetchmail-5.9.11-6.3mdk.i586.rpm 9640cc29c99b269c83a95ec4f751a443 7.1/RPMS/fetchmail-daemon-5.9.11-6.3mdk.i586.rpm e518dbf81590b0ad051bff74f754108b 7.1/RPMS/fetchmailconf-5.9.11-6.3mdk.i586.rpm 2d1746b747d2e15ebde5e38818dfd9d3 7.1/SRPMS/fetchmail-5.9.11-6.3mdk.src.rpm
7.2 i586
793e5dbc2794b53a97a3c9fa1a74b1ac 7.2/RPMS/fetchmail-5.9.11-6.3mdk.i586.rpm c8a84bf6328bcacdfc0f55116297683c 7.2/RPMS/fetchmail-daemon-5.9.11-6.3mdk.i586.rpm 1a7c8241a9240181d161b0267b8fd173 7.2/RPMS/fetchmailconf-5.9.11-6.3mdk.i586.rpm 2d1746b747d2e15ebde5e38818dfd9d3 7.2/SRPMS/fetchmail-5.9.11-6.3mdk.src.rpm