Skip to content
OpenAdvisories
Unscored RHSA-2007:0018 2 CVEs

Red Hat Security Advisory: fetchmail security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 2 enterprise_linux:2.1::as fetchmail 0:5.9.0-21.7.3.el2.1.4
Red Hat · RHEL 2 enterprise_linux:2.1::as fetchmailconf 0:5.9.0-21.7.3.el2.1.4
Red Hat · RHEL 2 enterprise_linux:2.1::aw fetchmail 0:5.9.0-21.7.3.el2.1.4
Red Hat · RHEL 2 enterprise_linux:2.1::aw fetchmailconf 0:5.9.0-21.7.3.el2.1.4
Red Hat · RHEL 2 enterprise_linux:2.1::es fetchmail 0:5.9.0-21.7.3.el2.1.4
Red Hat · RHEL 2 enterprise_linux:2.1::es fetchmailconf 0:5.9.0-21.7.3.el2.1.4
Red Hat · RHEL 2 enterprise_linux:2.1::ws fetchmail 0:5.9.0-21.7.3.el2.1.4
Red Hat · RHEL 2 enterprise_linux:2.1::ws fetchmailconf 0:5.9.0-21.7.3.el2.1.4
Red Hat · RHEL 3 enterprise_linux:3::as fetchmail 0:6.2.0-3.el3.3
Red Hat · RHEL 3 enterprise_linux:3::as fetchmail-debuginfo 0:6.2.0-3.el3.3
Red Hat · RHEL 3 enterprise_linux:3::desktop fetchmail 0:6.2.0-3.el3.3
Red Hat · RHEL 3 enterprise_linux:3::desktop fetchmail-debuginfo 0:6.2.0-3.el3.3
Red Hat · RHEL 3 enterprise_linux:3::es fetchmail 0:6.2.0-3.el3.3
Red Hat · RHEL 3 enterprise_linux:3::es fetchmail-debuginfo 0:6.2.0-3.el3.3
Red Hat · RHEL 3 enterprise_linux:3::ws fetchmail 0:6.2.0-3.el3.3
Red Hat · RHEL 3 enterprise_linux:3::ws fetchmail-debuginfo 0:6.2.0-3.el3.3
Red Hat · RHEL 4 enterprise_linux:4::as fetchmail 0:6.2.5-6.el4.5
Red Hat · RHEL 4 enterprise_linux:4::as fetchmail-debuginfo 0:6.2.5-6.el4.5
Red Hat · RHEL 4 enterprise_linux:4::desktop fetchmail 0:6.2.5-6.el4.5
Red Hat · RHEL 4 enterprise_linux:4::desktop fetchmail-debuginfo 0:6.2.5-6.el4.5
Red Hat · RHEL 4 enterprise_linux:4::es fetchmail 0:6.2.5-6.el4.5
Red Hat · RHEL 4 enterprise_linux:4::es fetchmail-debuginfo 0:6.2.5-6.el4.5
Red Hat · RHEL 4 enterprise_linux:4::ws fetchmail 0:6.2.5-6.el4.5
Red Hat · RHEL 4 enterprise_linux:4::ws fetchmail-debuginfo 0:6.2.5-6.el4.5

Vulnerabilities 2

  • Unscored —
    CVE-2005-4348

    fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denia…

    fetchmail Debian
  • Unscored —
    CVE-2006-5867

    fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if c…

    fetchmail Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt
  • article
    http://fetchmail.berlios.de/fetchmail-SA-2006-03.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=176266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=221981
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0018.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-4348
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617856
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-4348
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-4348
  • report
    https://access.redhat.com/security/cve/CVE-2006-5867
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=221984
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-5867
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-5867