Technical Description

A vulnerability has been identified in Fedora, which could be exploited by attackers to cause a denial of service. This issue is caused by an error in Fetchmail. For additional information, see : VUPEN/ADV-2007-3032

Affected Products

Fedora 7
Fedora Core 6

Solution

Upgrade the affected packages :

9c13de5c295c8332646586f33d6f4f42a5be58b9 fetchmail-debuginfo-6.3.7-2.fc7.ppc64.rpm
4c72297f3d658e4c863471628e67f196b3b24c47 fetchmail-6.3.7-2.fc7.ppc64.rpm
22cbcfc665490a6a0cf59fcdd5cb119ff0f0fead fetchmail-debuginfo-6.3.7-2.fc7.i386.rpm
a2bad7e2afc8e394a9f24869a68f5b5aa4132f99 fetchmail-6.3.7-2.fc7.i386.rpm
1509a06d524e72ea7e73a4d2981cbc5c94e01c3f fetchmail-debuginfo-6.3.7-2.fc7.x86_64.rpm
d82a151341886040feb8ab64a9d7ff4413985924 fetchmail-6.3.7-2.fc7.x86_64.rpm
1cffd7b2aa63d940cbfe6f16fda6c3f08d3ca6d6 fetchmail-6.3.7-2.fc7.ppc.rpm
a6b8315da35610c94ec9f860b5fb6d124197ae90 fetchmail-debuginfo-6.3.7-2.fc7.ppc.rpm
67b78d7b97c9213792c20eacc309d0cefa664f72 fetchmail-6.3.7-2.fc7.src.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

967b763df071f550db8c18b0f993b1c190cf8e06 SRPMS/fetchmail-6.3.6-3.fc6.src.rpm
967b763df071f550db8c18b0f993b1c190cf8e06 noarch/fetchmail-6.3.6-3.fc6.src.rpm
5717ad2e06184def6489ace8b8cee0275777298b ppc/fetchmail-6.3.6-3.fc6.ppc.rpm
bdcb11e27c6cca5e4a6d1a516631c91db79532e4 ppc/debug/fetchmail-debuginfo-6.3.6-3.fc6.ppc.rpm
3ca7a37b3253fb37c3f39abeb5058f0ece386019 x86_64/debug/fetchmail-debuginfo-6.3.6-3.fc6.x86_64.rpm
0f80e52cd7cd6e40d3c9ff5d362eae5e69c349bc x86_64/fetchmail-6.3.6-3.fc6.x86_64.rpm
d1c37746627c010eea5a1654e80ca1142174b48a i386/fetchmail-6.3.6-3.fc6.i386.rpm
8c525491a4a2ba3cdf6d45fcf06e7d8087390345 i386/debug/fetchmail-debuginfo-6.3.6-3.fc6.i386.rpm

References

http://www.vupen.com/english/advisories/2007/3048
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00099.html
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00039.html

ChangeLog

2007-09-05 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.