CVE-2010-1167 - CVE House

Status published Medium CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does...

4.3 CVSS

Vulnerability Description

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-1167

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from fetchmail

View All →

CVE-2025-61962

In fetchmail before 6.5.6, the SMTP client can crash when...

Medium 5.9

CVE-2021-39272

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in...

Medium 5.9

CVE-2021-36386

report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization...

High 7.5

CVE-2012-3482

Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug...

Medium 5.8

CVE-2011-1947

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait...

Medium 5

Affected Vendor

fetchmail

View all reports →

Affected Software

fetchmail

Vulnerable Versions:

0, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.7.0, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 4.7.6, 4.7.7, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.1.0, 5.1.4, 5.2.0, 5.2.1, 5.2.3, 5.2.4, 5.2.7, 5.2.8, 5.3.0, 5.3.1, 5.3.3, 5.3.8, 5.4.0, 5.4.3, 5.4.4, 5.4.5, 5.5.0, 5.5.2, 5.5.3, 5.5.5, 5.5.6, 5.6.0, 5.7.0, 5.7.2, 5.7.4, 5.8, 5.8.1, 5.8.2, 5.8.3, 5.8.4, 5.8.5, 5.8.6, 5.8.11, 5.8.13, 5.8.14, 5.8.17, 5.9.0, 5.9.4, 5.9.5, 5.9.8, 5.9.10, 5.9.11, 5.9.13, 6.0.0, 6.1.0, 6.1.3, 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.5.1, 6.2.5.2, 6.2.5.4, 6.2.6, 6.2.9, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14, 6.3.15, 6.3.16

Timeline

Official Publish: May 7th, 2010

Last Modified: August 7th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.