CVE-2009-2666

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-08-07 · updated 2026-06-16
Weakness: CWE-310

Description

socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Affected products

fetchmail: through 6.3.10; 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6 (+110)

References

http://fetchmail.berlios.de/fetchmail-SA-2009-01.txt
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
http://marc.info/?l=oss-security&m=124949601207156&w=2
http://osvdb.org/56855
http://secunia.com/advisories/36175
http://secunia.com/advisories/36179
http://secunia.com/advisories/36236
http://support.apple.com/kb/HT3937
http://www.debian.org/security/2009/dsa-1852
http://www.mandriva.com/security/advisories?name=MDVSA-2009:201
http://www.securityfocus.com/archive/1/505530/100/0/threaded
http://www.securityfocus.com/bid/35951

Get alerted when CVE-2009-2666 or the next vulnerability affects your stack