This script is Copyright (C) 2013-2015 Tenable Network Security, Inc.
The remote Oracle Linux host is missing a security update.
From Red Hat Security Advisory 2007:0385 :
An updated fetchmail package that fixes a security bug is now
available for Red Hat Enterprise Linux 2.1, 3, 4 and 5.
This update has been rated as having moderate security impact by the
Red Hat Security Response Team.
Fetchmail is a remote mail retrieval and forwarding utility intended
for use over on-demand TCP/IP links, like SLIP or PPP connections.
A flaw was found in the way fetchmail processed certain APOP
authentication requests. By sending certain responses when fetchmail
attempted to authenticate against an APOP server, a remote attacker
could potentially acquire certain portions of a user's authentication
All users of fetchmail should upgrade to this updated package, which
contains a backported patch to correct this issue.
See also :
Update the affected fetchmail package.
Risk factor :
Low / CVSS Base Score : 2.6
CVSS Temporal Score : 2.0
Public Exploit Available : true
Family: Oracle Linux Local Security Checks
Nessus Plugin ID: 67504 ()
Bugtraq ID: 23257
CVE ID: CVE-2007-1558
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.