CVE-2005-4348: fetchmail Resource Management Errors

EPSS trend

Probability

3.64%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.64% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

References

30 links

secunia.com/advisories/18266Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18172Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18231Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/3101VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
www.securityfocus.com/archive/1/420098/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21253Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1015383VDB EntryX Refsource SECTRACKThird Party Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
secunia.com/advisories/17891Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/19289VDB EntryX Refsource BIDThird Party Advisory

Show all 30 references

www.trustix.org/errata/2006/0002/Vendor AdvisoryX Refsource TRUSTIXBroken Link
secunia.com/advisories/18463Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24284Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24007Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9659VDB EntrySignatureX Refsource OVALThird Party Advisory
www.securityfocus.com/bid/15987VDB EntryX Refsource BIDThird Party Advisory
bugs.debian.org/cgi-bin/bugreport.cgi?bug=343836X Refsource MISCIssue TrackingMailing ListThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/23713VDB EntryX Refsource XFThird Party Advisory
www.novell.com/linux/security/advisories/2007_4_sr.htmlVendor AdvisoryX Refsource SUSEBroken Link
usn.ubuntu.com/233-1/Vendor AdvisoryX Refsource UBUNTU
www.osvdb.org/21906VDB EntryX Refsource OSVDBBroken Link
www.vupen.com/english/advisories/2005/2996VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:236Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.securityfocus.com/archive/1/435197/100/0/threadedMailing ListX Refsource BUGTRAQ
www.redhat.com/support/errata/RHSA-2007-0018.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/18895Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2005/dsa-939Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/18433Third Party AdvisoryX Refsource SECUNIA
fetchmail.berlios.de/fetchmail-SA-2005-03.txtX Refsource CONFIRMBroken Link
security-tracker.debian.org/tracker/CVE-2005-4348Advisory

Related vulnerabilities

RoutineCVE-2025-61962fetchmail +14 more1y agofetchmail fetchmailIn fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.CVSS5.9MediumEPSS0.41%RoutineCVE-2021-39272fedoraproject · fedora +14 more5y agofedoraproject fedoraFetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.CVSS5.9MediumEPSS0.92%PrioritiseCVE-2021-36386fedoraproject · fedora +35 more5y agofedoraproject fedorareport_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.CVSS7.5HighEPSS2.56%RoutineCVE-2012-3482fetchmail +5 more13y agofetchmail fetchmailFetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.CVSS5.8MediumEPSS1.87%RoutineCVE-2011-1947fetchmail +2 more15y agofetchmail fetchmailfetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.CVSS5.0MediumEPSS2.55%RoutineCVE-2009-2666fetchmail +1 more17y agofetchmail fetchmailsocket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.CVSS6.4MediumEPSS1.50%

All vulnerabilities infetchmail

CVE-2005-4348: fetchmail Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References