diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index f43bfb0f2e7e..b27e0859616d 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,40 @@ Note: Please add new entries to the beginning of this file. --> + + fetchmail -- potential crash in -v -v verbose mode + + + fetchmail + 6.3.8_6 + + + + +

Matthias Andree reports:

+
+

Gunter Nau reported fetchmail crashing on some messages; further + debugging by Petr Uzel and Petr Cerny at Novell/SUSE Czech Republic + dug up that this happened when fetchmail was trying to print, in + -v -v verbose level, headers exceeding 2048 bytes. In this + situation, fetchmail would resize the buffer and fill in further + parts of the message, but forget to reinitialize its va_list + typed source pointer, thus reading data from a garbage address found + on the stack at addresses above the function arguments the caller + passed in; usually that would be the caller's stack frame.

+
+ + + + CVE-2008-2711 + http://fetchmail.berlios.de/fetchmail-SA-2008-01.txt + + + 2008-06-13 + 2008-06-20 + + + xorg -- multiple vulnerabilities