https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:31:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380691 EUVD-2026-380691 https://cve.radiocsirt.org/vuln/euvd-2026-380691 https://cve.radiocsirt.org/vuln/fkie_cve-2026-94184 <p>A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.</p> <p>A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-94184 https://cve.radiocsirt.org/vuln/ghsa-5pfw-5pv2-2pc6 <p>A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.</p> <p>A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.</p> https://cve.radiocsirt.org/vuln/ghsa-5pfw-5pv2-2pc6 https://cve.radiocsirt.org/vuln/oesa-2026-4206 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: fetchmail</p> <p>Fetchmail is a mail retrieval daemon that can download messages from POP3, IMAP, ODMR and ETRN-based stores, with SSL/TLS security including certificate verification, and pass downloaded mail to a local SMTP or LMTP server, or a message delivery agent such as maildrop. Security Fix(es):</p> <p>A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.</p> <p>Affects v5.0.8 through v6.6.6.(CVE-2026-94184)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: fetchmail</p> <p>Fetchmail is a mail retrieval daemon that can download messages from POP3, IMAP, ODMR and ETRN-based stores, with SSL/TLS security including certificate verification, and pass downloaded mail to a local SMTP or LMTP server, or a message delivery agent such as maildrop. Security Fix(es):</p> <p>A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.</p> <p>Affects v5.0.8 through v6.6.6.(CVE-2026-94184)</p> https://cve.radiocsirt.org/vuln/oesa-2026-4206 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-94184 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: fetchmail, Ubuntu:18.04:LTS: fetchmail, Ubuntu:20.04:LTS: fetchmail, Ubuntu:22.04:LTS: fetchmail, Ubuntu:24.04:LTS: fetchmail, Ubuntu:26.04:LTS: fetchmail</p> <p>A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: fetchmail, Ubuntu:18.04:LTS: fetchmail, Ubuntu:20.04:LTS: fetchmail, Ubuntu:22.04:LTS: fetchmail, Ubuntu:24.04:LTS: fetchmail, Ubuntu:26.04:LTS: fetchmail</p> <p>A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-94184 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3495 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in fetchmail ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in fetchmail ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3495