Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Eric S. Raymond Fetchmail Multidrop模式远程拒绝服务攻击漏洞
Vulnerability Description
Fetchmail是一款由Eric S. Raymond维护的免费开放源代码邮件客户端。 Fetchmail运行在multidrop模式下解析邮件头的代码存在问题，远程攻击者可以利用这个漏洞进行拒绝服务攻击。 Fetchmail运行在multidrop模式下，其中getmxrecord()函数缺少正确的边界检查，可以导致远程使Fetchmail崩溃。要利用这个漏洞，攻击者必须能发送伪造的超大的DNS包给目标用户，这可以通过攻击者伪造目标用户使用的DNS服务器应答或者使目标用户查询由其控制的MX记录DNS服
CVSS Information
N/A
Vulnerability Type
N/A