CVE-2001-1009 in Fetchmail

Summary

Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 08/31/2001
• Moderation: VulDB entry created
• Entries: VDB-17291 (1)
• CPE: ready
• CWE: CWE-264 (Confirmed)
• Exploit: Download
• CVSS: 10.0
• EPSS: 0.33259
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2001-1009
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2001-1009
• CVE Details: https://www.cvedetails.com/cve/CVE-2001-1009/