Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an SSL X.509 certificate containing non-printable characters with the high bit set, which triggers a heap-based buffer overflow during escaping.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fetchmail SSL证书显示远程堆溢出漏洞
Vulnerability Description
Fetchmail是免费的软件包，可以从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传送代理。 Fetchmail存在远程堆溢出漏洞。以verbose模式运行的fetchmail会向用户显示X.509证书的标题和发布者信息，为此要计算并分配一个malloc()缓冲区。如果所要显示的内容包含有设置了高位的字符且平台将char类型设置为有符型，由于不可打印字符转义为了\xFF..FFnn(nn为十六进制的80..FF)，这可能会在sdump.
CVSS Information
N/A
Vulnerability Type
N/A