CVE-2002-0146

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-06-25 · updated 2026-06-16
Weakness: CWE-20

Description

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.

Affected products

fetchmail: through 5.9.8; 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6 (+68)

References

http://online.securityfocus.com/advisories/4145
http://www.iss.net/security_center/static/9133.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-036.php
http://www.redhat.com/support/errata/RHSA-2002-047.html
http://www.securityfocus.com/bid/4788
http://online.securityfocus.com/advisories/4145
http://www.iss.net/security_center/static/9133.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-036.php
http://www.redhat.com/support/errata/RHSA-2002-047.html
http://www.securityfocus.com/bid/4788

Get alerted when CVE-2002-0146 or the next vulnerability affects your stack