|
|
| |
|
| |
fetchmail: denial of service
| Package(s): | fetchmail |
CVE #(s): | CVE-2012-3482
|
| Created: | September 4, 2012 |
Updated: | April 5, 2013 |
| Description: |
From the Mandriva advisory:
A denial of service flaw was found in the way Fetchmail, a remote mail
retrieval and forwarding utility, performed base64 decoding of certain
NTLM server responses. Upon sending the NTLM authentication request,
Fetchmail did not check if the received response was actually part
of NTLM protocol exchange, or server-side error message and session
abort. A rogue NTML server could use this flaw to cause fetchmail
executable crash. |
| Alerts: |
|
( Log in to post comments)
|
|
|