CVEvulnerability

CVE-2012-3482

5.8 MEDIUM Published 2012-12-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-12-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:P

Description

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.

Affected configurations

• fetchmail fetchmail 5.0.8 • fetchmail fetchmail 5.1.0 • fetchmail fetchmail 5.1.4 • fetchmail fetchmail 5.2.0 • fetchmail fetchmail 5.2.1 • fetchmail fetchmail 5.2.3 • fetchmail fetchmail 5.2.4 • fetchmail fetchmail 5.2.7 • fetchmail fetchmail 5.2.8 • fetchmail fetchmail 5.3.0 • fetchmail fetchmail 5.3.1 • fetchmail fetchmail 5.3.3 • fetchmail fetchmail 5.3.8 • fetchmail fetchmail 5.4.0 • fetchmail fetchmail 5.4.3 • fetchmail fetchmail 5.4.4 • fetchmail fetchmail 5.4.5 • fetchmail fetchmail 5.5.0 • fetchmail fetchmail 5.5.2 • fetchmail fetchmail 5.5.3 • fetchmail fetchmail 5.5.5 • fetchmail fetchmail 5.5.6 • fetchmail fetchmail 5.6.0 • fetchmail fetchmail 5.7.0 • fetchmail fetchmail 5.7.2 • fetchmail fetchmail 5.7.4 • fetchmail fetchmail 5.8 • fetchmail fetchmail 5.8.1 • fetchmail fetchmail 5.8.2 • fetchmail fetchmail 5.8.3 • fetchmail fetchmail 5.8.4 • fetchmail fetchmail 5.8.5 • fetchmail fetchmail 5.8.6 • fetchmail fetchmail 5.8.11 • fetchmail fetchmail 5.8.13 • fetchmail fetchmail 5.8.14 • fetchmail fetchmail 5.8.17 • fetchmail fetchmail 5.9.0 • fetchmail fetchmail 5.9.4 • fetchmail fetchmail 5.9.5 • fetchmail fetchmail 5.9.8 • fetchmail fetchmail 5.9.10 • fetchmail fetchmail 5.9.11 • fetchmail fetchmail 5.9.13 • fetchmail fetchmail 6.0.0 • fetchmail fetchmail 6.1.0 • fetchmail fetchmail 6.1.3 • fetchmail fetchmail 6.2.0 • fetchmail fetchmail 6.2.1 • fetchmail fetchmail 6.2.2 • fetchmail fetchmail 6.2.3 • fetchmail fetchmail 6.2.4 • fetchmail fetchmail 6.2.5 • fetchmail fetchmail 6.2.5.1 • fetchmail fetchmail 6.2.5.2 • fetchmail fetchmail 6.2.5.4 • fetchmail fetchmail 6.2.6 • fetchmail fetchmail 6.2.9 • fetchmail fetchmail 6.3.0 • fetchmail fetchmail 6.3.1 … and 19 more

References