Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 14609] New: fetchmail 6.3.8 vulnerable to CVE-2007-4565 and CVE-2008-2711

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 14609] New: fetchmail 6.3.8 vulnerable to CVE-2007-4565 and CVE-2008-2711
  • Date: 30 Jul 2008 04:47:36 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=14609

Summary: fetchmail 6.3.8 vulnerable to CVE-2007-4565 and CVE-
2008-2711
Product: Codex
Version: stable grimoire
Platform: All
URL: http://fetchmail.berlios.de/
OS/Version: Linux
Status: NEW
Severity: major
Priority: P4
Component: mail
AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
ReportedBy: ryuji AT sourcemage.org



Elisamuel Resto <ryuji AT sourcemage.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Flag| |fixed_in_lesser_branch+,
| |integrate_to_stable_grimoire
| |?


fetchmail-6.3.8 is vulnerable to multiple crashes described below. The
recommended course of action was to either patch 6.3.8 with the included
patches or update to the latest release candidate which was preferred. This
was
fixed in test with commit 502c4868f739c75af1a1748471373eb0a47ea66a.

Requesting integration to stable-0.23.

CVE-2007-4565:
- http://fetchmail.berlios.de/fetchmail-SA-2007-02.txt
- http://secunia.com/cve_reference/CVE-2007-4565/

CVE-2008-2711:
- http://fetchmail.berlios.de/fetchmail-SA-2008-01.txt
- http://secunia.com/cve_reference/CVE-2008-2711/


--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.




Archive powered by MHonArc 2.6.24.

Top of Page