Alerts This Week
Warning Icon 1 825
Alerts This Week
Warning Icon 1 825

Debian 4.0 DSA-1377 Critical: Fetchmail Null Pointer Denial Of Service

debian
Calendar Grey September 21, 2007
Debian Logo
Fetchmail released a patch for a denial of service vulnerability in Debian DSA-1377, resolving a severe null pointer dereference issue.
Matthias Andree discovered that fetchmail, an SSL enabled POP3, APOP and IMAP mail gatherer/forwarder, can under certain circumstances attempt to dereference a NULL pointer a...
Topics%20covered

Topics Covered

security advisory denial of service fetchmail critical remote null pointer etch

Summary


For the old stable distribution (sarge), this problem was not present.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your fetchmail package.


Upgrade instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch

Size/MD5 checksum: 44533 19b72a3a0b2cf08f833ea21c3e18902c
Size/MD5 checksum: 1680200 04175459cdf32fdb10d9e8fc46b633c3
Size/MD5 checksum: 874 0aa3d869aba6fdfe87d1c4a626f5380e

Architecture independent packages:

Size/MD5 checksum: 61564 f587ce05ee98694f3bd4db0fa88742f7

...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory denial of service fetchmail critical remote null pointer etch

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here