|
Fetchmail Failed Warning Message Remote Denial of Service Vulnerability
Solution: The vendor has released an advisory along with fixes to address this issue. Please see the references for more information. The following patch is available from the vendor and can be used until the official Fetchmail 6.3.9 has been released: Index: sink.c =================================================================== --- sink.c (revision 5118) +++ sink.c (revision 5119) @@ -262,7 +262,7 @@ const char *md1 = "MAILER-DAEMON", *md2 = "MAILER-DAEMON@"; /* don't bounce in reply to undeliverable bounces */ - if (!msg->return_path[0] || + if (!msg || !msg->return_path[0] || strcmp(msg->return_path, "<>") == 0 || strcasecmp(msg->return_path, md1) == 0 || strncasecmp(msg->return_path, md2, strlen(md2)) == 0) Apple Mac OS X 10.4.11
Apple Mac OS X Server 10.4.11
Apple Mac OS X 10.5.6
|
|
|
Privacy Statement |
