Skip to content
OpenAdvisories
Unscored DSA-1852-1 1 CVE

fetchmail - SSL certificate verification weakness

Published Aug 7, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 fetchmail 6.3.6-1etch2
Debian · 5.0 fetchmail 6.3.9~rc2-4+lenny1

Vulnerabilities 1

  • Unscored —

    socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common …