CVE-2002-0146 - CVE House

Status published Medium CVE-2002-0146

fetchmail email client before 5.9.10 does not properly limit the...

5 CVSS

Vulnerability Description

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0146

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from fetchmail

View All →

CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when...

Medium 5.9

CVE-2021-39272

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in...

Medium 5.9

CVE-2021-36386

report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization...

High 7.5

CVE-2012-3482

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug...

Medium 5.8

CVE-2011-1947

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait...

Medium 5

Affected Vendor

fetchmail

View all reports →

Affected Software

fetchmail

Vulnerable Versions:

0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6, 4.5.7, 4.5.8, 4.6.0, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.7.0, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 4.7.6, 4.7.7, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.1.0, 5.1.4, 5.2.0, 5.2.1, 5.2.3, 5.2.4, 5.2.7, 5.2.8, 5.3.0, 5.3.1, 5.3.3, 5.3.8, 5.4.0, 5.4.3, 5.4.4, 5.4.5, 5.5.0, 5.5.2, 5.5.3, 5.5.5, 5.5.6, 5.6.0, 5.7.0, 5.7.2, 5.7.4, 5.8, 5.8.1, 5.8.2, 5.8.3, 5.8.4, 5.8.5, 5.8.6, 5.8.11, 5.8.13, 5.8.14, 5.8.17, 5.9.0, 5.9.4, 5.9.5

Timeline

Official Publish: April 2nd, 2003

Last Modified: August 8th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.