CVE-2012-3482 — Fetchmail vulnerability
7 documents6 sources
Severity
5.8MEDIUMNVD
EPSS
0.7%
top 27.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 21
Latest updateMay 17
Description
Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
CVSS vector
AV:N/AC:M/C:P/I:N/A:PExploitability: 8.6 | Impact: 4.9
Affected Packages3 packages
Patches
🔴Vulnerability Details
2📋Vendor Advisories
2💬Community
2Bugzilla▶
CVE-2012-3482 fetchmail: DoS (crash) in the base64 decoder upon server NTLM protocol exchange abort right after the initial request [fedora-all]↗2012-08-14
Bugzilla▶
CVE-2012-3482 fetchmail: DoS (crash) in the base64 decoder upon server NTLM protocol exchange abort right after the initial request↗2012-08-14