The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2002-10-10 21:00
Updated : 2016-10-17 19:24
NVD link : CVE-2002-1175
Mitre link : CVE-2002-1175
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
fetchmail
- fetchmail