Fetchmail NTLM Authentication Debug Mode Remote Denial of Service Vulnerability
BID:54987
Info
Fetchmail NTLM Authentication Debug Mode Remote Denial of Service Vulnerability
| Bugtraq ID: | 54987 |
| Class: | Design Error |
| CVE: |
CVE-2012-3482 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 13 2012 12:00AM |
| Updated: | Apr 16 2015 05:50PM |
| Credit: | J. Porter Clark |
| Vulnerable: |
Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Eric Raymond Fetchmail 6.3.17 Eric Raymond Fetchmail 6.3.16 Eric Raymond Fetchmail 6.3.13 Eric Raymond Fetchmail 6.3.12 Eric Raymond Fetchmail 6.3.11 Eric Raymond Fetchmail 6.3.10 Eric Raymond Fetchmail 6.3.1 Eric Raymond Fetchmail 6.3 Eric Raymond Fetchmail 6.2.5 Eric Raymond Fetchmail 6.2.4 Eric Raymond Fetchmail 6.2.2 Eric Raymond Fetchmail 6.1.3 Eric Raymond Fetchmail 5.9.14 Eric Raymond Fetchmail 5.9.13 Eric Raymond Fetchmail 5.9.12 Eric Raymond Fetchmail 5.9.11 Eric Raymond Fetchmail 5.9.10 Eric Raymond Fetchmail 5.9.9 Eric Raymond Fetchmail 5.9.8 Eric Raymond Fetchmail 5.9.7 Eric Raymond Fetchmail 5.9.6 Eric Raymond Fetchmail 5.9.5 Eric Raymond Fetchmail 5.9.4 Eric Raymond Fetchmail 5.9.3 Eric Raymond Fetchmail 5.9.2 Eric Raymond Fetchmail 5.9.1 Eric Raymond Fetchmail 5.8.17 Eric Raymond Fetchmail 5.8.16 Eric Raymond Fetchmail 5.8.15 Eric Raymond Fetchmail 5.8.14 Eric Raymond Fetchmail 5.8.13 Eric Raymond Fetchmail 5.8.12 Eric Raymond Fetchmail 5.8.11 Eric Raymond Fetchmail 5.8.10 Eric Raymond Fetchmail 5.8.9 Eric Raymond Fetchmail 5.8.8 Eric Raymond Fetchmail 5.8.7 Eric Raymond Fetchmail 5.8.6 Eric Raymond Fetchmail 5.8.5 Eric Raymond Fetchmail 5.8.4 Eric Raymond Fetchmail 5.8.3 Eric Raymond Fetchmail 5.8.2 Eric Raymond Fetchmail 5.8.1 Eric Raymond Fetchmail 5.7.4 Eric Raymond Fetchmail 5.7.3 Eric Raymond Fetchmail 5.7.2 Eric Raymond Fetchmail 5.7.1 Eric Raymond Fetchmail 5.7 Eric Raymond Fetchmail 5.6.8 Eric Raymond Fetchmail 5.6.7 Eric Raymond Fetchmail 5.6.6 Eric Raymond Fetchmail 5.6.5 Eric Raymond Fetchmail 5.6.4 Eric Raymond Fetchmail 5.6.3 Eric Raymond Fetchmail 5.6.2 Eric Raymond Fetchmail 5.6.1 Eric Raymond Fetchmail 5.6 Eric Raymond Fetchmail 5.5.6 Eric Raymond Fetchmail 5.5.5 Eric Raymond Fetchmail 5.5.4 Eric Raymond Fetchmail 5.5.3 Eric Raymond Fetchmail 5.5.2 Eric Raymond Fetchmail 5.5.1 Eric Raymond Fetchmail 5.5 Eric Raymond Fetchmail 5.4.5 Eric Raymond Fetchmail 5.4.4 Eric Raymond Fetchmail 5.4.3 Eric Raymond Fetchmail 5.4.2 Eric Raymond Fetchmail 5.4.1 Eric Raymond Fetchmail 5.3.8 Eric Raymond Fetchmail 5.3.7 Eric Raymond Fetchmail 5.3.6 Eric Raymond Fetchmail 5.3.5 Eric Raymond Fetchmail 5.3.4 Eric Raymond Fetchmail 5.3.3 Eric Raymond Fetchmail 5.3.2 Eric Raymond Fetchmail 5.3.1 Eric Raymond Fetchmail 5.3 Eric Raymond Fetchmail 5.2 Eric Raymond Fetchmail 5.1 Eric Raymond Fetchmail 6.3.20 Eric Raymond Fetchmail 6.3.19 Eric Raymond Fetchmail 6.3.18 |
| Not Vulnerable: | |
Discussion
Fetchmail NTLM Authentication Debug Mode Remote Denial of Service Vulnerability
Fetchmail is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause an application crash, denying service to legitimate users.
Fetchmail 6.3.21 and prior versions are vulnerable.
Fetchmail is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause an application crash, denying service to legitimate users.
Fetchmail 6.3.21 and prior versions are vulnerable.
Exploit / POC
Fetchmail NTLM Authentication Debug Mode Remote Denial of Service Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Fetchmail NTLM Authentication Debug Mode Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Fetchmail NTLM Authentication Debug Mode Remote Denial of Service Vulnerability
References:
References:
- Collax Business Server 5.5.12 (Collax)
- Collax Business Server Homepage (Collax)
- Collax Groupware Suite 5.5.12 (Collax)
- Collax Groupware Suite Homepage (Collax)
- Fetchmail Home Page (Fetchmail)
- Fetchmail-SA-2012-02: DoS possible with NTLM authentication in debug mode (Fetchmail)