Upstream information
Description
fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference when calling the (1) ferror or (2) fflush functions.NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Novell/SUSE information
Novell Bugzilla entry: 223507, 239002 SUSE Security Advisories:- SUSE-SA:2007:008, published Fri, 12 Jan 2007 17:00:00 +0000
- SUSE-SR:2007:001, published Fri, 19 Jan 2007 17:00:00 +0000
- SUSE-SR:2007:003, published Fri, 16 Feb 2007 16:00:00 +0000
- SUSE-SR:2007:004, published Fri, 16 Mar 2007 15:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE LINUX 10.0 |
| |
| SUSE LINUX 10.1 |
| |
| SUSE LINUX 9.3 |
| |
| Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 Open Enterprise Server |
| sled10.x86 sles9-oes.x86 slrs8.x86 ul1.s390 sles10.s390x core9.s390 YOU Patch Nr: 11432 ZYPP Patch Nr: 2608 |
| SUSE LINUX Retail Solution 8 SuSE Linux Desktop 1.0 SuSE Linux Enterprise Server 8 for AMD64 SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries SuSE Linux Enterprise Server 8 for IBM zSeries SuSE Linux Enterprise Server 8 for IPF SuSE Linux Openexchange Server 4 SuSE Linux School Server for i386 SuSE Linux Standard Server 8 UnitedLinux 1.0 |
| sled10.x86 sles9-oes.x86 slrs8.x86 ul1.s390 sles10.s390x core9.s390 YOU Patch Nr: 11432 ZYPP Patch Nr: 2608 |