← Database

CVE-2002-1175

MEDIUM CVSS: 5.0 Published: 2002-10-11 Modified: 2026-06-16

Description

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.

Affected Platforms

Fetchmail Fetchmail

Weakness Type

CWE-20

References