CVE-2006-5867
- State
- Published
- Severity
- Not scored
- Published
- Jan 9, 2007
- Updated
- Aug 7, 2024
- Reserved
- Nov 14, 2006
Description
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SSA:2007-024-01vendor-advisory
- USN-405-1vendor-advisory
- 24966third-party-advisory
- 31580vdb-entry
- 23781third-party-advisory
- 24174third-party-advisory
- DSA-1259vendor-advisory
- 23838third-party-advisory
- 24151third-party-advisory
- http://docs.info.apple.com/article.html?artnum=305391
- 23714third-party-advisory
- 21903vdb-entry
- 24284third-party-advisory
- 23631third-party-advisory
- 24007third-party-advisory
- 23804third-party-advisory
- 20070105 fetchmail security announcement 2006-02 (CVE-2006-5867)mailing-list
- ADV-2007-0088vdb-entry
- SUSE-SR:2007:004vendor-advisory
- TA07-109Athird-party-advisory
- 23695third-party-advisory
- http://fetchmail.berlios.de/fetchmail-SA-2006-02.txt
- MDKSA-2007:016vendor-advisory
- FEDORA-2007-041vendor-advisory
- 23923third-party-advisory
- OpenPKG-SA-2007.004vendor-advisory
- 2007-0007vendor-advisory
- 20070218 Re: [SECURITY] [DSA 1259-1] New fetchmail packages fix information disclosuremailing-list
- GLSA-200701-13vendor-advisory
- 1017478vdb-entry
- https://issues.rpath.com/browse/RPL-919
- APPLE-SA-2007-04-19vendor-advisory
- ADV-2007-1470vdb-entry
- ADV-2007-0087vdb-entry
- RHSA-2007:0018vendor-advisory
- oval:org.mitre.oval:def:10566vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.