← Database

CVE-2001-1009

CRITICAL CVSS: 10.0 Published: 2001-08-31 Modified: 2026-06-16

Description

Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.

Affected Platforms

Fetchmail Fetchmail

Weakness Type

CWE-264

References