CVE-2006-5867: Fetchmail

High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days.

fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.

Affected products

• Fetchmail Fetchmail: up to and including 6.3.6; version 4.5.1 only; version 4.5.2 only; version 4.5.3 only; version 4.5.4 only; version 4.5.5 only; …

Published 2006-12-31. Last modified 2026-06-16.