CVE ID:	CVE-2002-1365
Description:	Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.
Test IDs:	1.3.6.1.4.1.25623.1.0.50675   1.3.6.1.4.1.25623.1.0.54117   1.3.6.1.4.1.25623.1.0.53455   1.3.6.1.4.1.25623.1.0.51211
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1365 BugTraq ID: 6390 http://www.securityfocus.com/bid/6390 Bugtraq: 20021213 Advisory 05/2002: Another Fetchmail Remote Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=103979751818638&w=2 Bugtraq: 20021215 GLSA: fetchmail (Google Search) http://marc.info/?l=bugtraq&m=104004858802000&w=2 Caldera Security Advisory: CSSA-2003-001.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt Conectiva Linux advisory: CLA-2002:554 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554 Debian Security Information: DSA-216 (Google Search) http://www.debian.org/security/2002/dsa-216 En Garde Linux Advisory: ESA-20030127-002 Immunix Linux Advisory: IMNX-2003-7+-023-01 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011 http://security.e-matters.de/advisories/052002.html RedHat Security Advisories: RHSA-2002:293 http://www.redhat.com/support/errata/RHSA-2002-293.html RedHat Security Advisories: RHSA-2002:294 http://www.redhat.com/support/errata/RHSA-2002-294.html RedHat Security Advisories: RHSA-2003:155 http://www.redhat.com/support/errata/RHSA-2003-155.html SuSE Security Announcement: SuSE-SA:2003:001 (Google Search) XForce ISS Database: fetchmail-address-header-bo(10839) https://exchange.xforce.ibmcloud.com/vulnerabilities/10839