Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2005-4348: Fetchmail Crashes When Sending Invalid Email

CVE-2005-4348 · published 20 years ago

Summary

A security issue in older versions of Fetchmail can cause the application to crash if it receives emails without headers from a mail server. This could potentially disrupt email delivery and require manual intervention to recover. Update to Fetchmail version 6.3.1 or 6.2.5.5 to prevent this issue.

What to do

Update debian fetchmail to version 6.3.1-1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Debian:11	debian	fetchmail	< 6.3.1-1 Fix: upgrade to 6.3.1-1
Debian:12	debian	fetchmail	< 6.3.1-1 Fix: upgrade to 6.3.1-1
Debian:13	debian	fetchmail	< 6.3.1-1 Fix: upgrade to 6.3.1-1
Debian:14	debian	fetchmail	< 6.3.1-1 Fix: upgrade to 6.3.1-1
–	fetchmail	fetchmail	>= 6.2.0, < 6.2.5.5 >= 6.3.0, < 6.3.1 `cpe:2.3:a:fetchmail:fetchmail::::::::`

Original advisory text

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upst...

References

https://security-tracker.debian.org/tracker/CVE-2005-4348 Vendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=343836 Issue Tracking Mailing List Third Party Advisory
http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt Broken Link
http://secunia.com/advisories/17891 Third Party Advisory
http://secunia.com/advisories/18172 Third Party Advisory
http://secunia.com/advisories/18231 Third Party Advisory
http://secunia.com/advisories/18266 Third Party Advisory
http://secunia.com/advisories/18433 Third Party Advisory
http://secunia.com/advisories/18463 Third Party Advisory
http://secunia.com/advisories/18895 Third Party Advisory
http://secunia.com/advisories/21253 Third Party Advisory
http://secunia.com/advisories/24007 Third Party Advisory
http://secunia.com/advisories/24284 Third Party Advisory
http://securitytracker.com/id?1015383 Third Party Advisory VDB Entry
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware... Third Party Advisory
http://www.debian.org/security/2005/dsa-939 Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_4_sr.html Broken Link
http://www.osvdb.org/21906 Broken Link
http://www.redhat.com/support/errata/RHSA-2007-0018.html Third Party Advisory
http://www.securityfocus.com/archive/1/420098/100/0/threaded
http://www.securityfocus.com/archive/1/435197/100/0/threaded
http://www.securityfocus.com/bid/15987 Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/19289 Third Party Advisory VDB Entry
http://www.trustix.org/errata/2006/0002/ Broken Link
http://www.vupen.com/english/advisories/2005/2996 Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2006/3101 Permissions Required Third Party Advisory
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:236 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/23713 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3... Third Party Advisory
https://usn.ubuntu.com/233-1/

Severity

7.8 High

Exploitation

4% chance of attack within 30 days

Type

CWE-399Resource Management Errors

Timeline

Published21 Dec 2005

Updated4 Nov 2026

First seen22 Apr 2026

Sources

DEBIAN-CVE-2005-4348 · OSV

CVE-2005-4348 · NVD

Track software like this

Free during beta