UBUNTU-CVE-2012-3482
Dashboard / Vulnerabilities / UBUNTU-CVE-2012-3482
Summary:
Details: Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
References: https://ubuntu.com/security/CVE-2012-3482, http://www.fetchmail.info/fetchmail-SA-2012-02.txt, https://www.cve.org/CVERecord?id=CVE-2012-3482
Affected packages
Package
Name: fetchmail
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=trusty
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -6.3.26-1
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
