OESA-2021-1360
Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so you can read it through your favorite mail client. Install fetchmail if you need to retrieve mail over SLIP or PPP connections. Security Fix(es): Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.(CVE-2021-39272)
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| openEuler:20.03-LTS-SP1 | fetchmail | 0, 0 |
| openEuler:20.03-LTS-SP2 | fetchmail | 0, 0 |
Timeline
- Sep 30, 2021 CVE Published
- Sep 3, 2025 CVE Updated
- May 2, 2026 Security Advisory