What’s Vulnerable › Vulnerabilities

CVE-2006-5867

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-12-31 · updated 2026-06-16
• Weakness: CWE-20

Description

fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.

Affected products

• fetchmail: through 6.3.6; 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6 (+102)

References

• http://docs.info.apple.com/article.html?artnum=305391
• http://fedoranews.org/cms/node/2429
• http://fetchmail.berlios.de/fetchmail-SA-2006-02.txt
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
• http://osvdb.org/31580
• http://secunia.com/advisories/23631
• http://secunia.com/advisories/23695
• http://secunia.com/advisories/23714
• http://secunia.com/advisories/23781
• http://secunia.com/advisories/23804
• http://secunia.com/advisories/23838

Get alerted when CVE-2006-5867 or the next vulnerability affects your stack