Skip to content
OpenAdvisories
Unscored RHSA-2009:1427 3 CVEs

Red Hat Security Advisory: fetchmail security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as fetchmail 0:6.2.0-3.el3.5
Red Hat · RHEL 3 enterprise_linux:3::as fetchmail-debuginfo 0:6.2.0-3.el3.5
Red Hat · RHEL 3 enterprise_linux:3::desktop fetchmail 0:6.2.0-3.el3.5
Red Hat · RHEL 3 enterprise_linux:3::desktop fetchmail-debuginfo 0:6.2.0-3.el3.5
Red Hat · RHEL 3 enterprise_linux:3::es fetchmail 0:6.2.0-3.el3.5
Red Hat · RHEL 3 enterprise_linux:3::es fetchmail-debuginfo 0:6.2.0-3.el3.5
Red Hat · RHEL 3 enterprise_linux:3::ws fetchmail 0:6.2.0-3.el3.5
Red Hat · RHEL 3 enterprise_linux:3::ws fetchmail-debuginfo 0:6.2.0-3.el3.5
Red Hat · RHEL 4 enterprise_linux:4::as fetchmail 0:6.2.5-6.0.1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::as fetchmail-debuginfo 0:6.2.5-6.0.1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::desktop fetchmail 0:6.2.5-6.0.1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::desktop fetchmail-debuginfo 0:6.2.5-6.0.1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::es fetchmail 0:6.2.5-6.0.1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::es fetchmail-debuginfo 0:6.2.5-6.0.1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::ws fetchmail 0:6.2.5-6.0.1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::ws fetchmail-debuginfo 0:6.2.5-6.0.1.el4_8.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation fetchmail 0:6.3.6-1.1.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation fetchmail-debuginfo 0:6.3.6-1.1.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::server fetchmail 0:6.3.6-1.1.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::server fetchmail-debuginfo 0:6.3.6-1.1.el5_3.1

Vulnerabilities 3

  • Unscored —
    CVE-2007-4565

    sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service (NULL dereference and …

    fetchmail Debian
  • Unscored —
    CVE-2008-2711

    fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of ser…

    fetchmail Debian
  • Unscored —
    CVE-2009-2666

    socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common …

    fetchmail Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=260601
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=451758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=515804
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1427.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-4565
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4565
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4565
  • report
    https://access.redhat.com/security/cve/CVE-2008-2711
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2711
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2711
  • report
    https://access.redhat.com/security/cve/CVE-2009-2666
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2666
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2666