CVE-2005-4348

N/A

Published: December 21, 2005 at 12:00 AM UTC

Updated: June 16, 2026 at 10:18 PM UTC

1 product affected across 1 vendorFetchmail

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 4%

Description

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fetchmail · Fetchmail

95%

6.2.0 ≤ v < 6.2.5.56.3.0 ≤ v < 6.3.1

Affected range stops below 6.2.5.5, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.3.1, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (30)

Vendor Advisoryx_refsource_SGIBroken Link

Source: [email protected]

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc

x_refsource_MISCIssue TrackingMailing ListThird Party Advisory

Source: [email protected]

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=343836

x_refsource_CONFIRMBroken Link

Source: [email protected]

http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt