Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly…

Description

Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier.

Scores

EPSS (exploitation in 30 days)

5.9% · top 6.8% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.

Weakness

• n/a
• CWE-119 (opens in a new tab)All about CWE-119 and its CVEs

Affected products

• n/a

  • affected n/a

References (22)

• APPLE-SA-2006-08-01 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• 14349 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• SUSE-SR:2005:018 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• ADV-2006-3101 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00104.html (opens in a new tab)x_refsource_MISCx_transferred
• ADV-2005-1171 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 21253 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 19289 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt (opens in a new tab)x_refsource_CONFIRMx_transferred
• 18174 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• TA06-214A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
• oval:org.mitre.oval:def:1124 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• FEDORA-2005-613 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• oval:org.mitre.oval:def:1038 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• http://developer.berlios.de/project/shownotes.php?release_id=6617 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 20060801 DMA[2006-0801a] - 'Apple OSX fetchmail buffer overflow' (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• oval:org.mitre.oval:def:8833 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• DSA-774 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• RHSA-2005:640 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• FEDORA-2005-614 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• 20060526 rPSA-2006-0084-1 fetchmail (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 16176 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2005-2335](https://trackcve.app/badge/CVE-2005-2335.svg)](https://trackcve.app/cve/CVE-2005-2335)

Record last updated 7 Aug 2024, 22:22 UTC.