Vulnerability Name:

CVE-2006-5867 (CCN-31413)

Assigned:2006-12-31
Published:2006-12-31
Updated:2018-10-17
Summary:fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:7.8 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N)
6.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): None
Availibility (A): None
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
4.3 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-20
Vulnerability Consequences:Obtain Information
References:Source: SGI
Type: UNKNOWN
20070201-01-P

Source: MITRE
Type: CNA
CVE-2006-5867

Source: CCN
Type: Apple Security Update 2007-004
Security Update 2007-004

Source: CONFIRM
Type: UNKNOWN
http://docs.info.apple.com/article.html?artnum=305391

Source: FEDORA
Type: UNKNOWN
FEDORA-2007-041

Source: CCN
Type: fetchmail-SA-2006-02
TLS enforcement problem/MITM attack/password exposure

Source: CONFIRM
Type: UNKNOWN
http://fetchmail.berlios.de/fetchmail-SA-2006-02.txt

Source: APPLE
Type: UNKNOWN
APPLE-SA-2007-04-19

Source: OSVDB
Type: UNKNOWN
31580

Source: CCN
Type: RHSA-2007-0018
Moderate: fetchmail security update

Source: CCN
Type: SA23631
Fetchmail TLS Configuration Security Issue and "MDA" Denial of Service

Source: SECUNIA
Type: Vendor Advisory
23631

Source: SECUNIA
Type: Vendor Advisory
23695

Source: SECUNIA
Type: Vendor Advisory
23714

Source: SECUNIA
Type: Vendor Advisory
23781

Source: SECUNIA
Type: Vendor Advisory
23804

Source: SECUNIA
Type: Vendor Advisory
23838

Source: SECUNIA
Type: Vendor Advisory
23923

Source: SECUNIA
Type: Vendor Advisory
24007

Source: SECUNIA
Type: Vendor Advisory
24151

Source: SECUNIA
Type: Vendor Advisory
24174

Source: SECUNIA
Type: Vendor Advisory
24284

Source: CCN
Type: SA24966
Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
24966

Source: GENTOO
Type: UNKNOWN
GLSA-200701-13

Source: CCN
Type: SECTRACK ID: 1017478
Fetchmail TLS Security Bugs May Let Eavesdroppers Obtain Passwords

Source: SECTRACK
Type: UNKNOWN
1017478

Source: SLACKWARE
Type: UNKNOWN
SSA:2007-024-01

Source: CCN
Type: ASA-2007-111
fetchmail security update (RHSA-2007-0018)

Source: DEBIAN
Type: UNKNOWN
DSA-1259

Source: DEBIAN
Type: DSA-1259
fetchmail -- programming error

Source: CCN
Type: GLSA-200701-13
Fetchmail: Denial of Service and password disclosure

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2007:016

Source: SUSE
Type: UNKNOWN
SUSE-SR:2007:004

Source: CCN
Type: OpenPKG-SA-2007.004
Fetchmail

Source: OPENPKG
Type: UNKNOWN
OpenPKG-SA-2007.004

Source: CCN
Type: OSVDB ID: 31580
Fetchmail TLS Enforcement Cleartext Credential Disclosure

Source: REDHAT
Type: UNKNOWN
RHSA-2007:0018

Source: BUGTRAQ
Type: UNKNOWN
20070105 fetchmail security announcement 2006-02 (CVE-2006-5867)

Source: BUGTRAQ
Type: UNKNOWN
20070218 Re: [SECURITY] [DSA 1259-1] New fetchmail packages fix information disclosure

Source: BID
Type: Patch
21903

Source: CCN
Type: BID-21903
Fetchmail Multiple Password Information Disclosure Vulnerabilities

Source: TRUSTIX
Type: UNKNOWN
2007-0007

Source: CCN
Type: TLSA-2007-3
Three vulnerabilities discovered in fetchmail

Source: CCN
Type: USN-405-1
fetchmail vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-405-1

Source: CERT
Type: US Government Resource
TA07-109A

Source: VUPEN
Type: UNKNOWN
ADV-2007-0087

Source: VUPEN
Type: UNKNOWN
ADV-2007-0088

Source: VUPEN
Type: UNKNOWN
ADV-2007-1470

Source: XF
Type: UNKNOWN
fetchmail-plaintext-information-disclosure(31413)

Source: CONFIRM
Type: UNKNOWN
https://issues.rpath.com/browse/RPL-919

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:10566

Source: SUSE
Type: SUSE-SA:2007:008
XFree86/Xorg security problems

Source: SUSE
Type: SUSE-SR:2007:001
SUSE Security Summary Report

Source: SUSE
Type: SUSE-SR:2007:003
SUSE Security Summary Report

Source: SUSE
Type: SUSE-SR:2007:004
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.9.8:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.5.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.5.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.5.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.6:pre4:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.6:pre8:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.6:pre9:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.9:rc10:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.9:rc3:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.9:rc4:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.9:rc5:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.9:rc7:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.9:rc8:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.2.9:rc9:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.3.2:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.3.3:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.3.4:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.3.5:*:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.3.6:rc1:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:6.3.6:rc2:*:*:*:*:*:*
  • OR cpe:/a:fetchmail:fetchmail:*:rc3:*:*:*:*:*:* (Version <= 6.3.6)

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20065867
    V
    		CVE-2006-5867
    2022-06-30
    oval:org.opensuse.security:def:112218
    P
    		fetchmail-6.4.21-2.1 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:26220
    P
    		Security update for MozillaFirefox (Important) (in QA)
    2022-01-14
    oval:org.opensuse.security:def:31373
    P
    		Security update for net-snmp (Important)
    2022-01-05
    oval:org.opensuse.security:def:42301
    P
    		Security update for libvirt (Important)
    2022-01-04
    oval:org.opensuse.security:def:26176
    P
    		Security update for speex (Moderate)
    2021-12-01
    oval:org.opensuse.security:def:33048
    P
    		Security update for java-1_8_0-openjdk (Important)
    2021-11-23
    oval:org.opensuse.security:def:26162
    P
    		Security update for pcre (Moderate)
    2021-11-10
    oval:org.opensuse.security:def:105749
    P
    		fetchmail-6.4.21-2.1 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:26123
    P
    		Security update for openssl-1_0_0 (Low)
    2021-09-09
    oval:org.opensuse.security:def:32181
    P
    		Security update for xen (Important)
    2021-09-06
    oval:org.opensuse.security:def:31678
    P
    		Security update for file (Important)
    2021-09-02
    oval:org.opensuse.security:def:31676
    P
    		Security update for openexr (Important)
    2021-09-02
    oval:org.opensuse.security:def:31671
    P
    		Security update for openssl (Important)
    2021-08-24
    oval:org.opensuse.security:def:31249
    P
    		Security update for python-PyYAML (Important)
    2021-08-24
    oval:org.opensuse.security:def:26099
    P
    		Security update for libsndfile (Critical)
    2021-08-05
    oval:org.opensuse.security:def:31230
    P
    		Security update for linuxptp (Important)
    2021-07-21
    oval:org.opensuse.security:def:42102
    P
    		Security update for the Linux Kernel (Important)
    2021-07-14
    oval:org.opensuse.security:def:32137
    P
    		Security update for libsolv (Important)
    2021-06-28
    oval:org.opensuse.security:def:26074
    P
    		Security update for freeradius-server (Moderate)
    2021-06-11
    oval:org.opensuse.security:def:36124
    P
    		fetchmail-6.3.8.90-13.20.19.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:32115
    P
    		Security update for spice (Important)
    2021-06-08
    oval:org.opensuse.security:def:42531
    P
    		fetchmail-6.3.8.90-13.20.19.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:31622
    P
    		Security update for graphviz (Critical)
    2021-05-19
    oval:org.opensuse.security:def:31175
    P
    		Security update for graphviz (Critical)
    2021-05-19
    oval:org.opensuse.security:def:31617
    P
    		Security update for samba (Important)
    2021-05-04
    oval:org.opensuse.security:def:32076
    P
    		Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)
    2021-04-28
    oval:org.opensuse.security:def:31163
    P
    		Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-04-28
    oval:org.opensuse.security:def:31164
    P
    		Security update for libnettle (Important)
    2021-04-28
    oval:org.opensuse.security:def:31362
    P
    		Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)
    2021-03-17
    oval:org.opensuse.security:def:31361
    P
    		Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)
    2021-03-17
    oval:org.opensuse.security:def:33087
    P
    		Security update for java-1_8_0-ibm (Important)
    2021-02-26
    oval:org.opensuse.security:def:31728
    P
    		Security update for jasper (Important)
    2021-02-16
    oval:org.opensuse.security:def:32256
    P
    		Security update for wpa_supplicant (Important)
    2021-02-15
    oval:org.opensuse.security:def:31727
    P
    		Security update for wpa_supplicant (Important)
    2021-02-15
    oval:org.opensuse.security:def:31322
    P
    		Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-02-10
    oval:org.opensuse.security:def:32200
    P
    		Security update for python3 (Important)
    2021-02-08
    oval:org.opensuse.security:def:31098
    P
    		Security update for MozillaFirefox (Critical)
    2020-12-21
    oval:org.opensuse.security:def:35894
    P
    		fetchmail-6.3.8.90-13.20.19.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35544
    P
    		fetchmail-6.3.8.90-13.16.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:41951
    P
    		fetchmail-6.3.8.90-13.16.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35695
    P
    		fetchmail-6.3.8.90-13.20.19.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:32819
    P
    		Security update for python-setuptools (Important)
    2020-12-02
    oval:org.opensuse.security:def:25258
    P
    		Security update for postgresql10 (Low)
    2020-12-01
    oval:org.opensuse.security:def:25588
    P
    		Security update for xorg-x11-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:26858
    P
    		aaa_base on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25445
    P
    		Security update for accountsservice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25729
    P
    		Security update for spamassassin (Important)
    2020-12-01
    oval:org.opensuse.security:def:26303
    P
    		Security update for dnsmasq (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26449
    P
    		Security update for nginx (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25673
    P
    		Security update for openldap2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25877
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:31788
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31466
    P
    		Security update for postgresql94 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31917
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32660
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31530
    P
    		Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:32410
    P
    		Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31590
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31808
    P
    		Security update for apache2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25725
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:25871
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25095
    P
    		Security update for mariadb-100 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25299
    P
    		Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25823
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:25978
    P
    		Security update for tcpdump, libpcap (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25322
    P
    		Security update for tigervnc (Critical)
    2020-12-01
    oval:org.opensuse.security:def:25672
    P
    		Security update for java-1_7_0-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:26893
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25456
    P
    		Security update for ghostscript (Important)
    2020-12-01
    oval:org.opensuse.security:def:25786
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26352
    P
    		Security update for Mozilla Thunderbird (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27087
    P
    		augeas on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25674
    P
    		Security update for the Linux Kernel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25958
    P
    		Security update for libwpd (Important)
    2020-12-01
    oval:org.opensuse.security:def:31832
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:31012
    P
    		Security update for java-1_7_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:31773
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31939
    P
    		Security update for glibc (Important)
    2020-12-01
    oval:org.opensuse.security:def:32858
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32305
    P
    		Security update for python (Important)
    2020-12-01
    oval:org.opensuse.security:def:31591
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31900
    P
    		Security update for Mozilla Firefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:25774
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26509
    P
    		Security update for cacti, cacti-spine (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25096
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25380
    P
    		Security update for apache2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25876
    P
    		Security update for libssh (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26022
    P
    		Security update for icu (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25246
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25450
    P
    		Security update for bluez (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26021
    P
    		Security update for libreoffice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25520
    P
    		Security update for krb5-appl (Important)
    2020-12-01
    oval:org.opensuse.security:def:25870
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26391
    P
    		Security update for MozillaThunderbird (Important)
    2020-12-01
    oval:org.opensuse.security:def:27122
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25685
    P
    		Security update for mariadb (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26015
    P
    		Security update for libplist (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32470
    P
    		Security update for xorg-x11-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:31013
    P
    		Security update for java-1_7_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:31829
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:31983
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:31381
    P
    		Security update for openssl1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31971
    P
    		Security update for jakarta-commons-collections (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31447
    P
    		Security update for postgresql94 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31815
    P
    		Security update for apache2-mod_perl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32344
    P
    		Security update for spice (Important)
    2020-12-01
    oval:org.opensuse.security:def:31602
    P
    		Security update for tomcat6
    2020-12-01
    oval:org.opensuse.security:def:31957
    P
    		Security update for gdk2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25813
    P
    		Security update for libssh (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26544
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25107
    P
    		Security update for openssl-1_1 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25437
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:25925
    P
    		Security update for pcre (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26660
    P
    		NetworkManager-gnome on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25247
    P
    		Security update for libpng16 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25531
    P
    		Security update for ucode-intel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25444
    P
    		Security update for sysstat (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25648
    P
    		Security update for python36 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26250
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26405
    P
    		Security update for sox (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25749
    P
    		Security update for pidgin (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31766
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:32509
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31024
    P
    		Security update for java-1_7_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:31379
    P
    		Security update for openssl1 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31878
    P
    		Security update for dhcp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32621
    P
    		zoo on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31473
    P
    		Security update for procmail
    2020-12-01
    oval:org.opensuse.security:def:32027
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31579
    P
    		Security update for supportutils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32366
    P
    		Security update for supportutils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32044
    P
    		Security update for krb5 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25827
    P
    		Security update for flash-player (Critical)
    2020-12-01
    oval:org.opensuse.security:def:25171
    P
    		Security update for mailman (Important)
    2020-12-01
    oval:org.opensuse.security:def:25521
    P
    		Security update for libexif (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25964
    P
    		Security update for libraw (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26695
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.mitre.oval:def:10566
    V
    		fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.
    2013-04-29
    oval:com.redhat.rhsa:def:20070018
    P
    		RHSA-2007:0018: fetchmail security update (Moderate)
    2008-03-20
    oval:org.debian:def:1259
    V
    		programming error
    2007-02-14
    BACK
    fetchmail fetchmail 4.5.1
    fetchmail fetchmail 4.5.2
    fetchmail fetchmail 4.5.3
    fetchmail fetchmail 4.5.4
    fetchmail fetchmail 4.5.5
    fetchmail fetchmail 4.5.6
    fetchmail fetchmail 4.5.7
    fetchmail fetchmail 4.5.8
    fetchmail fetchmail 4.6.0
    fetchmail fetchmail 4.6.1
    fetchmail fetchmail 4.6.2
    fetchmail fetchmail 4.6.3
    fetchmail fetchmail 4.6.4
    fetchmail fetchmail 4.6.5
    fetchmail fetchmail 4.6.6
    fetchmail fetchmail 4.6.7
    fetchmail fetchmail 4.6.8
    fetchmail fetchmail 4.6.9
    fetchmail fetchmail 4.7.0
    fetchmail fetchmail 4.7.1
    fetchmail fetchmail 4.7.2
    fetchmail fetchmail 4.7.3
    fetchmail fetchmail 4.7.4
    fetchmail fetchmail 4.7.5
    fetchmail fetchmail 4.7.6
    fetchmail fetchmail 4.7.7
    fetchmail fetchmail 5.0.0
    fetchmail fetchmail 5.0.1
    fetchmail fetchmail 5.0.2
    fetchmail fetchmail 5.0.3
    fetchmail fetchmail 5.0.4
    fetchmail fetchmail 5.0.5
    fetchmail fetchmail 5.0.6
    fetchmail fetchmail 5.0.7
    fetchmail fetchmail 5.0.8
    fetchmail fetchmail 5.1.0
    fetchmail fetchmail 5.1.4
    fetchmail fetchmail 5.2.0
    fetchmail fetchmail 5.2.1
    fetchmail fetchmail 5.2.3
    fetchmail fetchmail 5.2.4
    fetchmail fetchmail 5.2.7
    fetchmail fetchmail 5.2.8
    fetchmail fetchmail 5.3.0
    fetchmail fetchmail 5.3.1
    fetchmail fetchmail 5.3.3
    fetchmail fetchmail 5.3.8
    fetchmail fetchmail 5.4.0
    fetchmail fetchmail 5.4.3
    fetchmail fetchmail 5.4.4
    fetchmail fetchmail 5.4.5
    fetchmail fetchmail 5.5.0
    fetchmail fetchmail 5.5.2
    fetchmail fetchmail 5.5.3
    fetchmail fetchmail 5.5.5
    fetchmail fetchmail 5.5.6
    fetchmail fetchmail 5.6.0
    fetchmail fetchmail 5.7.0
    fetchmail fetchmail 5.7.2
    fetchmail fetchmail 5.7.4
    fetchmail fetchmail 5.8
    fetchmail fetchmail 5.8.1
    fetchmail fetchmail 5.8.2
    fetchmail fetchmail 5.8.3
    fetchmail fetchmail 5.8.4
    fetchmail fetchmail 5.8.5
    fetchmail fetchmail 5.8.6
    fetchmail fetchmail 5.8.11
    fetchmail fetchmail 5.8.13
    fetchmail fetchmail 5.8.14
    fetchmail fetchmail 5.8.17
    fetchmail fetchmail 5.9.0
    fetchmail fetchmail 5.9.4
    fetchmail fetchmail 5.9.5
    fetchmail fetchmail 5.9.8
    fetchmail fetchmail 5.9.10
    fetchmail fetchmail 5.9.11
    fetchmail fetchmail 5.9.13
    fetchmail fetchmail 6.0.0
    fetchmail fetchmail 6.1.0
    fetchmail fetchmail 6.1.3
    fetchmail fetchmail 6.2.0
    fetchmail fetchmail 6.2.1
    fetchmail fetchmail 6.2.2
    fetchmail fetchmail 6.2.3
    fetchmail fetchmail 6.2.4
    fetchmail fetchmail 6.2.5
    fetchmail fetchmail 6.2.5.1
    fetchmail fetchmail 6.2.5.2
    fetchmail fetchmail 6.2.5.4
    fetchmail fetchmail 6.2.6 pre4
    fetchmail fetchmail 6.2.6 pre8
    fetchmail fetchmail 6.2.6 pre9
    fetchmail fetchmail 6.2.9 rc10
    fetchmail fetchmail 6.2.9 rc3
    fetchmail fetchmail 6.2.9 rc4
    fetchmail fetchmail 6.2.9 rc5
    fetchmail fetchmail 6.2.9 rc7
    fetchmail fetchmail 6.2.9 rc8
    fetchmail fetchmail 6.2.9 rc9
    fetchmail fetchmail 6.3.0
    fetchmail fetchmail 6.3.1
    fetchmail fetchmail 6.3.2
    fetchmail fetchmail 6.3.3
    fetchmail fetchmail 6.3.4
    fetchmail fetchmail 6.3.5
    fetchmail fetchmail 6.3.6 rc1
    fetchmail fetchmail 6.3.6 rc2
    fetchmail fetchmail * rc3