Threats Tagged 'ghsa-5pfw-5pv2-2pc6'

A stack-based buffer overflow vulnerability exists in fetchmail when it is built with NTLM support. This flaw can be exploited by a malicious or compromised mail server sending a crafted NTLM Type 2 challenge, potentially causing fetchmail to overwrite a fixed stack buffer. The vulnerability may lead to remote code execution, authentication failures, or process termination under memory hardening conditions. Multiple specific fetchmail versions across SUSE and Ubuntu distributions are affected. The vulnerability is classified as medium severity with a CVSS score of 8.1.