QwikSec

Security Database

CVE

CWE

Training

CVE-2012-3482

Published: Dec 21, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20120813 Re: CVE ID request for fetchmail segfault in NTLM protocol exchange

mailing-list

x_refsource_MLIST

[oss-security] 20120813 CVE ID request for fetchmail segfault in NTLM protocol exchange

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_BID

https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail

x_refsource_CONFIRM

FEDORA-2012-14451

vendor-advisory

x_refsource_FEDORA

FEDORA-2012-14462

vendor-advisory

x_refsource_FEDORA

http://www.fetchmail.info/fetchmail-SA-2012-02.txt

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.