USN-816-1: fetchmail vulnerability

iBot · #1 (**permalink**) 08-12-2009

Referenced CVEs:
CVE-2009-2666

Description:
=========================================================== Ubuntu Security Notice USN-816-1 August 12, 2009 fetchmail vulnerability CVE-2009-2666 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: fetchmail 6.3.2-2ubuntu2.3 Ubuntu 8.04 LTS: fetchmail 6.3.8-10ubuntu1.1 Ubuntu 8.10: fetchmail 6.3.8-11ubuntu3.1 Ubuntu 9.04: fetchmail 6.3.9~rc2-4ubuntu1.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Moxie Marlinspike discovered that fetchmail did not properly handle certificates with NULL characters in the certificate name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications.

More...

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
Slackware: fetchmail	iBot	Security Advisories (RSS)	0	08-06-2009 12:15 PM
Fetchmail Ate my inbox!	drewrockshard	Linux	3	09-08-2008 03:24 AM
Mandriva: Updated fetchmail packages fix DoS vulnerability	iBot	Security Advisories (RSS)	0	06-20-2008 11:40 AM
fetchmail taking long time to fetchmail...	squid04	UNIX for Dummies Questions & Answers	2	02-07-2007 12:09 AM
fetchmail with pop3	jaguar	IP Networking	2	09-25-2005 04:58 AM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode	Rate This Thread:


	Powered by