VDB
CVE-2002-1174
CVE-2002-1174
PUBLISHED
Reported by mitre · Published October 1, 2002
Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readheaders function, or (2) via long Received: headers, which are not properly parsed by the parse_received function.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| fetchmail | fetchmail | |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Oct 1, 2002 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
References
- MDKSA-2002:063 vendor-advisoryx_refsource_MANDRAKE
- 5827 vdb-entryx_refsource_BID
- 20020929 Advisory 03/2002: Fetchmail remote vulnerabilities mailing-listx_refsource_BUGTRAQ
- 5825 vdb-entryx_refsource_BID
- RHSA-2002:215 vendor-advisoryx_refsource_REDHAT
- fetchmail-multidrop-bo(10203) vdb-entryx_refsource_XF
- CLA-2002:531 vendor-advisoryx_refsource_CONECTIVA
- ESA-20021003-023 vendor-advisoryx_refsource_ENGARDE
- DSA-171 vendor-advisoryx_refsource_DEBIAN