CVE-2006-5974

fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference when calling the (1) ferror or (2) fflush functions.

• CWE-20

• http://fedoranews.org/cms/node/2429
• http://fetchmail.berlios.de/fetchmail-SA-2006-03.txt
• http://osvdb.org/31836
• http://secunia.com/advisories/23631Vendor Advisory
• http://secunia.com/advisories/23804Vendor Advisory
• http://secunia.com/advisories/23838Vendor Advisory
• http://secunia.com/advisories/23923Vendor Advisory
• http://secunia.com/advisories/24151Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200701-13.xml
• http://securitytracker.com/id?1017479
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.517995
• http://www.novell.com/linux/security/advisories/2007_4_sr.html
• http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.004.html
• http://www.securityfocus.com/archive/1/456114/100/0/threaded
• http://www.securityfocus.com/bid/21902Patch
• http://www.trustix.org/errata/2007/0007
• http://www.vupen.com/english/advisories/2007/0087
• http://www.vupen.com/english/advisories/2007/0088
• http://fedoranews.org/cms/node/2429
• http://fetchmail.berlios.de/fetchmail-SA-2006-03.txt
• http://osvdb.org/31836
• http://secunia.com/advisories/23631Vendor Advisory
• http://secunia.com/advisories/23804Vendor Advisory
• http://secunia.com/advisories/23838Vendor Advisory
• http://secunia.com/advisories/23923Vendor Advisory
• http://secunia.com/advisories/24151Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200701-13.xml
• http://securitytracker.com/id?1017479
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.517995
• http://www.novell.com/linux/security/advisories/2007_4_sr.html
• http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.004.html
• http://www.securityfocus.com/archive/1/456114/100/0/threaded
• http://www.securityfocus.com/bid/21902Patch
• http://www.trustix.org/errata/2007/0007
• http://www.vupen.com/english/advisories/2007/0087
• http://www.vupen.com/english/advisories/2007/0088

Published

Dec 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5968MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other ver…
• CVE-2006-5969CRLF injection vulnerability in the evalFolderLine function …
• CVE-2006-5970Verity Ultraseek before 5.7 allows remote attackers to obtai…
• CVE-2006-5971Absolute path traversal vulnerability in admin/logfile.txt i…
• CVE-2006-5972Stack-based buffer overflow in WG111v2.SYS in NetGear WG111v…
• CVE-2006-5973Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.…
• CVE-2006-5975Multiple cross-site scripting (XSS) vulnerabilities in comme…
• CVE-2006-5976Multiple SQL injection vulnerabilities in admin_login.asp in…
• CVE-2006-5977Multiple SQL injection vulnerabilities in MultiCalendars all…
• CVE-2006-5978Unspecified vulnerability in E-Xoopport before 2.2.0 has unk…
• CVE-2006-5979Renasoft NetJetServer 2.5.3.939, and possibly earlier, uses …
• CVE-2006-5980adm_lgn_admin.asp in Renasoft NetJetServer 2.5.3.939, and po…