Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Eric S. Raymond Fetchmail Multidrop Mode Email Header Parsing Heap Overflow Vulnerability

A remotely exploitable heap overflow vulnerability has been reported for Fetchmail 6.0.0 and earlier. The vulnerability occurs in the function which is used to parse email headers. This vulnerability affects Fetchmail in multidrop mode and will cause Fetchmail to corrupt heap memory with attacker-supplied values.

An attacker may exploit this condition to overwrite arbitrary words in memory. This may allow for the execution of arbitrary code.







 

Privacy Statement
Copyright 2008, SecurityFocus