VYPR
Unrated severityNVD Advisory· Published Dec 31, 2006· Updated Apr 23, 2026

CVE-2006-5974

CVE-2006-5974

Description

fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference when calling the (1) ferror or (2) fflush functions.

Affected products

4
  • cpe:2.3:a:fetchmail:fetchmail:6.3.5:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fetchmail:fetchmail:6.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc1:*:*:*:*:*:*
    • cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc2:*:*:*:*:*:*
    • cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc3:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

18

News mentions

0

No linked articles in our index yet.