Debian/fetchmail: unknown
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level is
Action: Upgrade fetchmail to 6.3.8-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.3.8-1 | - |
Fixed versions
| 6.3.8-1 |
Sources
- osv: DEBIAN-CVE-2007-1558#Debian:12/fetchmail
- https://security-tracker.debian.org/tracker/CVE-2007-1558
published · modified · JSON