diff options
| author | Matthias Andree <matthias.andree@gmx.de> | 2008-06-17 12:43:03 +0000 |
|---|---|---|
| committer | Matthias Andree <matthias.andree@gmx.de> | 2008-06-17 12:43:03 +0000 |
| commit | d344694f96268b7cda5bcdcb927665b2e7e19af3 (patch) | |
| tree | 9ada4123ee5e601b358c6c582935a4695269865c /NEWS | |
| parent | 20afc0193ac8d87b93de813b44f2a76552f71639 (diff) | |
| download | fetchmail-d344694f96268b7cda5bcdcb927665b2e7e19af3.tar.gz fetchmail-d344694f96268b7cda5bcdcb927665b2e7e19af3.tar.bz2 fetchmail-d344694f96268b7cda5bcdcb927665b2e7e19af3.zip | |
Add CVE Name CVE-2008-2711 for fetchmail-SA-2008-01.
svn path=/branches/BRANCH_6-3/; revision=5196
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -54,7 +54,7 @@ fetchmail 6.3.9 (not yet released): This bug was apparently introduced on 1998-11-27 when the bouncemail facility was modularized. The bug then made its appearance in fetchmail release 4.6.8. See also fetchmail-SA-2007-02.txt. -* CVE-2008-XXXX: Denial of service: When fetchmail logs data blobs +* CVE-2008-2711: Denial of service: When fetchmail logs data blobs (for instance, a To: header in -v -v verbose mode) in excess of 2048 bytes, it will crash, because it hands an uninitialized argument pointer (not the format string though) to vsnprintf and reads a |