FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

fetchmail -- TLS enforcement problem/MITM attack/password exposure

Affected packages
fetchmail < 6.3.6

Details

VuXML ID 5238ac45-9d8c-11db-858b-0060084a00e5
Discovery 2007-01-04
Entry 2007-01-06

Matthias Andree reports:

Fetchmail has had several longstanding password disclosure vulnerabilities.

References

CVE Name CVE-2006-5867
URL http://www.fetchmail.info/fetchmail-SA-2006-02.txt