← Database

CVE-2002-1365

HIGH CVSS: 7.5 Published: 2002-12-23 Modified: 2026-06-16

Description

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.

Affected Platforms

Fetchmail Fetchmail

Weakness Type

CWE-119

References