Fetchmail NTLM authentication debugging mode Remote Denial of Service Security Vulnerability

Release date:
Updated on:

Affected Systems:
Fetchmail 5.0.8-6.3.21
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54987

Fetchmail is a free software package that allows you to retrieve and forward emails from a remote POP2, POP3, IMAP, ETRN, or ODMR server to a local SMTP, LMTP server, or message delivery proxy.

Fetchmail v5.0.8-6.3.21 has a Denial-of-Service vulnerability. Attackers can exploit this vulnerability to cause application crashes and DoS attacks to legitimate users.

<* Source: J. Porter Clark
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Fetchmail
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://fetchmail.berlios.de/