Vulnerability-Lookup

CVE-2005-3088 (GCVE-0-2005-3088)

Vulnerability from cvelistv5 – Published: 2005-10-27 04:00 – Updated: 2024-08-07 23:01

Summary

fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2339 records in the last 180 days details

References

24 references

URL	Tags
http://www.vupen.com/english/advisories/2005/2182	vdb-entryx_refsource_VUPEN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.osvdb.org/20267	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/17293	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17349	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17446	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/3101	vdb-entryx_refsource_VUPEN
http://securitytracker.com/id?1015114	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/21253	third-party-advisoryx_refsource_SECUNIA
http://slackware.com/security/viewer.php?l=slackw…	vendor-advisoryx_refsource_SLACKWARE
http://www.securityfocus.com/bid/19289	vdb-entryx_refsource_BID
http://www.us-cert.gov/cas/techalerts/TA06-214A.html	third-party-advisoryx_refsource_CERT
http://marc.info/?l=bugtraq&m=113042785902031&w=2	mailing-listx_refsource_BUGTRAQ
http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt	x_refsource_CONFIRM
http://www.debian.org/security/2005/dsa-900	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/15179	vdb-entryx_refsource_BID
http://www.redhat.com/support/errata/RHSA-2005-823.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/17495	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/215-1/	vendor-advisoryx_refsource_UBUNTU
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/17491	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18895	third-party-advisoryx_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-20051…	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/17631	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-10-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:01:57.815Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2005-2182",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2182"
          },
          {
            "name": "APPLE-SA-2006-08-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
          },
          {
            "name": "20267",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/20267"
          },
          {
            "name": "17293",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17293"
          },
          {
            "name": "17349",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17349"
          },
          {
            "name": "17446",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17446"
          },
          {
            "name": "ADV-2006-3101",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "name": "1015114",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015114"
          },
          {
            "name": "21253",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21253"
          },
          {
            "name": "SSA:2006-045-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
          },
          {
            "name": "19289",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "name": "TA06-214A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
          },
          {
            "name": "20051027 fetchmail security announcement 2005-02 (CVE-2005-3088)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
          },
          {
            "name": "DSA-900",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2005/dsa-900"
          },
          {
            "name": "15179",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15179"
          },
          {
            "name": "RHSA-2005:823",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
          },
          {
            "name": "17495",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17495"
          },
          {
            "name": "USN-215-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/215-1/"
          },
          {
            "name": "MDKSA-2005:209",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
          },
          {
            "name": "17491",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17491"
          },
          {
            "name": "18895",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18895"
          },
          {
            "name": "GLSA-200511-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
          },
          {
            "name": "17631",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17631"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2005-2182",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2182"
        },
        {
          "name": "APPLE-SA-2006-08-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
        },
        {
          "name": "20267",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/20267"
        },
        {
          "name": "17293",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17293"
        },
        {
          "name": "17349",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17349"
        },
        {
          "name": "17446",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17446"
        },
        {
          "name": "ADV-2006-3101",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3101"
        },
        {
          "name": "1015114",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015114"
        },
        {
          "name": "21253",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21253"
        },
        {
          "name": "SSA:2006-045-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
        },
        {
          "name": "19289",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19289"
        },
        {
          "name": "TA06-214A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
        },
        {
          "name": "20051027 fetchmail security announcement 2005-02 (CVE-2005-3088)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
        },
        {
          "name": "DSA-900",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2005/dsa-900"
        },
        {
          "name": "15179",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15179"
        },
        {
          "name": "RHSA-2005:823",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
        },
        {
          "name": "17495",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17495"
        },
        {
          "name": "USN-215-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/215-1/"
        },
        {
          "name": "MDKSA-2005:209",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
        },
        {
          "name": "17491",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17491"
        },
        {
          "name": "18895",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18895"
        },
        {
          "name": "GLSA-200511-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
        },
        {
          "name": "17631",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17631"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3088",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2005-2182",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2182"
            },
            {
              "name": "APPLE-SA-2006-08-01",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
            },
            {
              "name": "20267",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/20267"
            },
            {
              "name": "17293",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17293"
            },
            {
              "name": "17349",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17349"
            },
            {
              "name": "17446",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17446"
            },
            {
              "name": "ADV-2006-3101",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3101"
            },
            {
              "name": "1015114",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015114"
            },
            {
              "name": "21253",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21253"
            },
            {
              "name": "SSA:2006-045-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
            },
            {
              "name": "19289",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19289"
            },
            {
              "name": "TA06-214A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
            },
            {
              "name": "20051027 fetchmail security announcement 2005-02 (CVE-2005-3088)",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
            },
            {
              "name": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt",
              "refsource": "CONFIRM",
              "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
            },
            {
              "name": "DSA-900",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2005/dsa-900"
            },
            {
              "name": "15179",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15179"
            },
            {
              "name": "RHSA-2005:823",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
            },
            {
              "name": "17495",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17495"
            },
            {
              "name": "USN-215-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/215-1/"
            },
            {
              "name": "MDKSA-2005:209",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
            },
            {
              "name": "17491",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17491"
            },
            {
              "name": "18895",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18895"
            },
            {
              "name": "GLSA-200511-06",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
            },
            {
              "name": "17631",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17631"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3088",
    "datePublished": "2005-10-27T04:00:00.000Z",
    "dateReserved": "2005-09-28T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:01:57.815Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2005-3088",
      "date": "2026-10-17",
      "epss": "0.00453",
      "percentile": "0.37896"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "264386DA-747F-492C-B660-D49BE9DB7139",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "61F908FF-9986-4F71-B0B6-D6A86555EF56",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fetchmail:fetchmail:6.2.5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "028F7F83-AF15-443B-A7DB-4E695E62EAFB",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords."
          }
        ],
        "id": "CVE-2005-3088",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "LOW",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 2.1,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "NONE",
                "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2005-10-27T10:02:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17293"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17349"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17446"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17491"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17495"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17631"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/18895"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21253"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securitytracker.com/id?1015114"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2005/dsa-900"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.osvdb.org/20267"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/15179"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2005/2182"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://usn.ubuntu.com/215-1/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17293"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17349"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17446"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17491"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17495"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17631"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/18895"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21253"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1015114"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2005/dsa-900"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/20267"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/15179"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2005/2182"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://usn.ubuntu.com/215-1/"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-200"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:28:01+00:00",
      "cve": "CVE-2005-3088",
      "id": "CVE-2005-3088",
      "initial_release_date": "2005-10-21T00:00:00+00:00",
      "product_status:fixed": "4",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2005/cve-2005-3088.json",
      "version": "3"
    }
  }
}

CERTA-2006-AVI-317

Vulnerability from certfr_avis - Published: 2006-08-02 - Updated: 2006-08-02

De nombreuses vulnérabilités ont été identifiées dans le systèmes d'exploitation Mac OS X. Elles concernent plusieurs applications et services, notamment DHCP, bluetooth, fetchmail, gunzip, ImageIO, telnet, OpenSSH ou LaunchServices. Les risques sont variés, certains peuvant conduire à l'exécution de code arbitraire à distance.

Description

De nombreuses vulnérabilités ont été identifiées dans le systèmes d'exploitation Mac OS X. Elles concernent plusieurs applications et services. Parmi celles-ci :

DHCP : le service bootpd ne gère pas correctement certaines requêtes, pouvant provoquer un débordement de tampon. Une personne malveillante peut profiter de cette vulnérabilité pour exécuter du code arbitraire à distance, par le biais d'une requête spécialement conçue. Le service bootpd n'est cependant pas activé par défaut sur Mac OS X.
bluetooth : la clé secrète générée automatiquement pour la phase d'association avec d'autres appareils bluetooth n'est pas suffisamment longue. Elle facilite les attaques par recherche exhaustive.
gunzip : il serait possible, localement, de modifier les permissions de fichiers appartenant à d'autres utilisateurs exécutant gunzip.
ImageIO : cette application ne gère pas correctement certaines images de type Radiance ou GIF. L'ouverture d'images malveillantes exploitant ces vulnérabilités peut provoquer un déni de service, ou l'exécution de code arbitraire.
OpenSSH : un utilisateur malveillant peut chercher à se connecter à distance (remote login) sur une machine vulnérable en testant plusieurs identifiants. La répétition de cette opération peut conduire à la découverte de comptes valides sur le serveur et à son mauvais fonctionnement (déni de service).
telnet : au cours de la connexion à un serveur Telnet distant, un utilisateur malveillant peut accéder à plusieurs variables d'environnement confidentielles à l'insu de l'utilisateur qui s'y connecte.

D'autres vulnérabilités touchent dyld (gestion des liens dynamiques pour les bibliothèques), AFP Server (non activé par défaut), Bom (système de fichiers pour l'installation), Image RAW, WebKit et AppKit. Les risques sont variés, certains pouvant conduire à l'exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Intel	N/A	la version Mac 0S X 10.4.7 (PPC et Intel) ainsi que celles antérieures ;
Intel	N/A	La version Mac 0S X 10.3.9 ainsi que celles antérieures ;
Intel	N/A	la version Mac 0S X 10.4.7 Server (PPC et Intel) ainsi que celles antérieures.
Intel	N/A	la version Mac 0S X 10.3.9 Server ainsi que celles antérieures ;

References

Title

Publication Time

FKIE_CVE-2005-3088

Vulnerability from fkie_nvd - Published: 2005-10-27 10:02 - Updated: 2026-06-16 22:16

Severity

Summary

References

URL	Tags
cve@mitre.org	http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt	Patch, Vendor Advisory
cve@mitre.org	http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
cve@mitre.org	http://marc.info/?l=bugtraq&m=113042785902031&w=2
cve@mitre.org	http://secunia.com/advisories/17293	Patch, Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/17349	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/17446	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/17491	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/17495	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/17631	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/18895	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/21253	Vendor Advisory
cve@mitre.org	http://securitytracker.com/id?1015114
cve@mitre.org	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499
cve@mitre.org	http://www.debian.org/security/2005/dsa-900
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDKSA-2005:209
cve@mitre.org	http://www.osvdb.org/20267
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2005-823.html
cve@mitre.org	http://www.securityfocus.com/bid/15179	Patch
cve@mitre.org	http://www.securityfocus.com/bid/19289
cve@mitre.org	http://www.us-cert.gov/cas/techalerts/TA06-214A.html	US Government Resource
cve@mitre.org	http://www.vupen.com/english/advisories/2005/2182
cve@mitre.org	http://www.vupen.com/english/advisories/2006/3101
cve@mitre.org	https://usn.ubuntu.com/215-1/
af854a3a-2127-422b-91ae-364da2661108	http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=113042785902031&w=2
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17293	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17349	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17446	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17491	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17495	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17631	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18895	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21253	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1015114
af854a3a-2127-422b-91ae-364da2661108	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2005/dsa-900
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2005:209
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/20267
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2005-823.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/15179	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/19289
af854a3a-2127-422b-91ae-364da2661108	http://www.us-cert.gov/cas/techalerts/TA06-214A.html	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2005/2182
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/3101
af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/215-1/

Impacted products

Vendor	Product	Version
fetchmail	fetchmail	6.2.0
fetchmail	fetchmail	6.2.5
fetchmail	fetchmail	6.2.5.2

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "264386DA-747F-492C-B660-D49BE9DB7139",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "61F908FF-9986-4F71-B0B6-D6A86555EF56",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fetchmail:fetchmail:6.2.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "028F7F83-AF15-443B-A7DB-4E695E62EAFB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords."
    }
  ],
  "id": "CVE-2005-3088",
  "lastModified": "2026-06-16T22:16:13.823",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-10-27T10:02:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17293"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17349"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17446"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17491"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17495"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17631"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18895"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21253"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015114"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2005/dsa-900"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/20267"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/15179"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/19289"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2005/2182"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/3101"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://usn.ubuntu.com/215-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17293"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17349"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17446"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17491"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17495"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17631"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18895"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21253"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015114"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2005/dsa-900"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/20267"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/15179"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/19289"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2005/2182"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/3101"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/215-1/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-78M6-W6R4-M4H9

Vulnerability from github – Published: 2022-05-01 02:14 – Updated: 2025-04-03 04:18

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2005-3088"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2005-10-27T10:02:00Z",
    "severity": "LOW"
  },
  "details": "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.",
  "id": "GHSA-78m6-w6r4-m4h9",
  "modified": "2025-04-03T04:18:51Z",
  "published": "2022-05-01T02:14:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-3088"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/215-1"
    },
    {
      "type": "WEB",
      "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17293"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17349"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17446"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17491"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17495"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17631"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18895"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21253"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1015114"
    },
    {
      "type": "WEB",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2005/dsa-900"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/20267"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/15179"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/19289"
    },
    {
      "type": "WEB",
      "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2005/2182"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/3101"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2005-3088

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2005-3088

Aliases

CVE-2005-3088

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2005-3088",
    "description": "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.",
    "id": "GSD-2005-3088",
    "references": [
      "https://www.suse.com/security/cve/CVE-2005-3088.html",
      "https://www.debian.org/security/2005/dsa-900",
      "https://access.redhat.com/errata/RHSA-2005:823"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2005-3088"
      ],
      "details": "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.",
      "id": "GSD-2005-3088",
      "modified": "2023-12-13T01:20:12.157576Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2005-3088",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "ADV-2005-2182",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2005/2182"
          },
          {
            "name": "APPLE-SA-2006-08-01",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
          },
          {
            "name": "20267",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/20267"
          },
          {
            "name": "17293",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/17293"
          },
          {
            "name": "17349",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/17349"
          },
          {
            "name": "17446",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/17446"
          },
          {
            "name": "ADV-2006-3101",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "name": "1015114",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1015114"
          },
          {
            "name": "21253",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21253"
          },
          {
            "name": "SSA:2006-045-01",
            "refsource": "SLACKWARE",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
          },
          {
            "name": "19289",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "name": "TA06-214A",
            "refsource": "CERT",
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
          },
          {
            "name": "20051027 fetchmail security announcement 2005-02 (CVE-2005-3088)",
            "refsource": "BUGTRAQ",
            "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
          },
          {
            "name": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt",
            "refsource": "CONFIRM",
            "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
          },
          {
            "name": "DSA-900",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2005/dsa-900"
          },
          {
            "name": "15179",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/15179"
          },
          {
            "name": "RHSA-2005:823",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
          },
          {
            "name": "17495",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/17495"
          },
          {
            "name": "USN-215-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/215-1/"
          },
          {
            "name": "MDKSA-2005:209",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
          },
          {
            "name": "17491",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/17491"
          },
          {
            "name": "18895",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18895"
          },
          {
            "name": "GLSA-200511-06",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
          },
          {
            "name": "17631",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/17631"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fetchmail:fetchmail:6.2.5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3088"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-200"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt"
            },
            {
              "name": "15179",
              "refsource": "BID",
              "tags": [
                "Patch"
              ],
              "url": "http://www.securityfocus.com/bid/15179"
            },
            {
              "name": "17293",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/17293"
            },
            {
              "name": "1015114",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1015114"
            },
            {
              "name": "DSA-900",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2005/dsa-900"
            },
            {
              "name": "17491",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/17491"
            },
            {
              "name": "17631",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/17631"
            },
            {
              "name": "GLSA-200511-06",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml"
            },
            {
              "name": "RHSA-2005:823",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2005-823.html"
            },
            {
              "name": "17349",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/17349"
            },
            {
              "name": "17446",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/17446"
            },
            {
              "name": "17495",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/17495"
            },
            {
              "name": "18895",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/18895"
            },
            {
              "name": "SSA:2006-045-01",
              "refsource": "SLACKWARE",
              "tags": [],
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.443499"
            },
            {
              "name": "APPLE-SA-2006-08-01",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
            },
            {
              "name": "21253",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/21253"
            },
            {
              "name": "19289",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/19289"
            },
            {
              "name": "20267",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/20267"
            },
            {
              "name": "TA06-214A",
              "refsource": "CERT",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
            },
            {
              "name": "MDKSA-2005:209",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:209"
            },
            {
              "name": "ADV-2005-2182",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2005/2182"
            },
            {
              "name": "ADV-2006-3101",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/3101"
            },
            {
              "name": "20051027 fetchmail security announcement 2005-02 (CVE-2005-3088)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=113042785902031\u0026w=2"
            },
            {
              "name": "USN-215-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "https://usn.ubuntu.com/215-1/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-03T21:31Z",
      "publishedDate": "2005-10-27T10:02Z"
    }
  }
}

RHSA-2005:823

Vulnerability from csaf_redhat - Published: 2005-10-26 16:02 - Updated: 2025-11-21 17:29

Summary

Red Hat Security Advisory: fetchmail security update

Severity

Low

Scope

1 vulnerability in this advisory, including CVE-2005-3088.

CVE-2005-3088

Fixed: 4 products

https://access.redhat.com/errata/RHSA-2005:823

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2005-3088 (GCVE-0-2005-3088)

CERTA-2006-AVI-317

Description

Solution

FKIE_CVE-2005-3088

GHSA-78M6-W6R4-M4H9

GSD-2005-3088

RHSA-2005:823

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour