Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Eric S. Raymond Fetchmail信息统计IMAP远程缓冲区溢出漏洞
Vulnerability Description
Fetchmail是一款由Eric S. Raymond维护的免费开放源代码邮件客户端。 Fetchmail在对信息索引统计处理时存在漏洞，可导致远程攻击者进行缓冲溢出攻击。 当Fetchmail接收来自IMAP服务器的邮件时，客户端会分配数组来存储它要获取的信息，而分配的数组大小由服务器决定，fetchmail 5.9.10版本之前的程序没有检查IMAP服务器提供的数字是否过高，攻击者可以伪造恶意服务器信息导致Fetchmail进程破坏数组边界造成缓冲区溢出，精心提供服务器响应信息可导致以Fetchma
CVSS Information
N/A
Vulnerability Type
N/A