Lucene search

K
centosCentOS ProjectCESA-2006:0577-01
HistoryJul 13, 2006 - 12:49 a.m.

mutt security update

2006-07-1300:49:58
CentOS Project
lists.centos.org
61

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.241 Low

EPSS

Percentile

96.6%

CentOS Errata and Security Advisory CESA-2006:0577-01

Mutt is a text-mode mail user agent.

A buffer overflow flaw was found in the way Mutt processes an overly
long namespace from a malicious imap server. In order to exploit this
flaw a user would have to use Mutt to connect to a malicious IMAP server.
(CVE-2006-3242)

Users of Mutt are advised to upgrade to these erratum packages, which
contain a backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2006-July/075177.html

Affected packages:
mutt

OSVersionArchitecturePackageVersionFilename
CentOS2i386mutt<Β 1.2.5.1-2.rhel21mutt-1.2.5.1-2.rhel21.i386.rpm

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.241 Low

EPSS

Percentile

96.6%