Eric S. Raymond Fetchmail Multidrop Mode Email Header Parsing Heap Overflow Vulnerability Solution:
Gentoo Linux has released an advisory. It is highly advised that users who have installed net-mail/fetchmai-0.59.14 and earlier update their systems by issuing the following commands:
emerge rsync
emerge fetchmail
emerge clean
Users of EnGarde Secure Linux are advised to upgrade vulnerable systems by installing the RPMs listed in the advisory. Further details can be found in the referenced advisory.
Conectiva has released an advisory. Fixes are available.
Sun has released an advisory. Sun Cobalt Qube 2.0, Qube 3.0 and Sun Linux 5.0 are vulnerable to this issue. Upgrade details are available in Sun Alert 47784.
Apple advises users to upgrade to MacOS X 10.2.3. Upgrades are available for MacOS X 10.2 and 10.2.2. Other versions may also be affected.
The vendor has released Fetchmail 6.1.0 which is not vulnerable to this issue. Users are advised to upgrade to the newest version of Fetchmail:
Sun Cobalt Qube 3
Apple Mac OS X 10.2
Apple Mac OS X 10.2.2
Eric Raymond Fetchmail 5.3.3
Eric Raymond Fetchmail 5.4 .0
Eric Raymond Fetchmail 5.5
Eric Raymond Fetchmail 5.6
Eric Raymond Fetchmail 5.7
Eric Raymond Fetchmail 5.8 .0
Eric Raymond Fetchmail 5.9 .0
Eric Raymond Fetchmail 5.9.10
Eric Raymond Fetchmail 5.9.11
Eric Raymond Fetchmail 5.9.12
Eric Raymond Fetchmail 5.9.6
Eric Raymond Fetchmail 5.9.7
Eric Raymond Fetchmail 5.9.8
Eric Raymond Fetchmail 5.9.9
Eric Raymond Fetchmail 6.0 .0
