Lucene search

CVE-2020-28896

🗓️ 23 Nov 2020 19:11:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 251 Views

Mutt & NeoMutt < 2.0.2 & 2020-11-20 allow exposure of credentials on invalid IMAP server respons

Reporter	Title	Published	Views	Family All 74
Tenable Nessus	SUSE SLES12 Security Update : mutt (SUSE-SU-2020:3632-1)	9 Dec 202000:00	–	nessus
Tenable Nessus	Slackware 14.0 / 14.1 / 14.2 / current : mutt (SSA:2020-329-01)	25 Nov 202000:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : mutt (SUSE-SU-2020:3568-1)	9 Dec 202000:00	–	nessus
Tenable Nessus	SUSE SLES11 Security Update : mutt (SUSE-SU-2020:14551-1)	10 Jun 202100:00	–	nessus
Tenable Nessus	FreeBSD : mutt -- authentication credentials being sent over an unencrypted connection (dc132c91-2b71-11eb-8cfd-4437e6ad11c4)	23 Nov 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : mutt (EulerOS-SA-2021-1690)	24 Mar 202100:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Mutt vulnerability (USN-4645-1)	25 Nov 202000:00	–	nessus
Tenable Nessus	openSUSE Security Update : mutt (openSUSE-2020-2128)	7 Dec 202000:00	–	nessus
Tenable Nessus	Debian DLA-2472-1 : mutt security update	1 Dec 202000:00	–	nessus
Tenable Nessus	openSUSE Security Update : mutt (openSUSE-2020-2141)	3 Dec 202000:00	–	nessus

Nvd

Node

mutt muttRange<2.0.2

neomutt neomuttRange<2020-11-20

Node

debian debian_linuxMatch9.0

Source	Link
gitlab	www.gitlab.com/muttmua/mutt/-/commit/d92689088dfe80a290ec836e292376e2d9984f8f
github	www.github.com/neomutt/neomutt/releases/tag/20201120
gitlab	www.gitlab.com/muttmua/mutt/-/commit/04b06aaa3e0cc0022b9b01dbca2863756ebbf59a
lists	www.lists.debian.org/debian-lts-announce/2020/11/msg00048.html
github	www.github.com/neomutt/neomutt/commit/9c36717a3e2af1f2c1b7242035455ec8112b4b06
security	www.security.gentoo.org/glsa/202101-32

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Nov 2020 19:15Current

5.6Medium risk

Vulners AI Score5.6

CVSS22.6

CVSS35.3

EPSS0.00625