The remote host is missing an update for the 'mutt' package(s) announced via the ALAS-2014-310 advisory. A heap-based buffer overflow flaw was found in the way mutt processed certain email headers, which could allow remote attackers to crash mutt or execute arbitrary code. The affected package is 'mutt' on Amazon Linux. Please install the updated package(s
Reporter | Title | Published | Views | Family All 62 |
---|---|---|---|---|
![]() | CentOS Update for mutt CESA-2014:0304 centos6 | 20 Mar 201400:00 | β | openvas |
![]() | CentOS Update for mutt CESA-2014:0304 centos6 | 20 Mar 201400:00 | β | openvas |
![]() | Oracle: Security Advisory (ELSA-2014-0304) | 6 Oct 201500:00 | β | openvas |
![]() | Fedora Update for mutt FEDORA-2014-6408 | 19 May 201400:00 | β | openvas |
![]() | Gentoo Security Advisory GLSA 201406-05 | 29 Sep 201500:00 | β | openvas |
![]() | Mageia: Security Advisory (MGASA-2014-0141) | 28 Jan 202200:00 | β | openvas |
![]() | Debian Security Advisory DSA 2874-1 (mutt - security update) | 12 Mar 201400:00 | β | openvas |
![]() | Fedora Update for mutt FEDORA-2014-5880 | 12 May 201400:00 | β | openvas |
![]() | SUSE: Security Advisory for mutt (SUSE-SU-2014:0471-1) | 13 Oct 201500:00 | β | openvas |
![]() | RedHat Update for mutt RHSA-2014:0304-01 | 20 Mar 201400:00 | β | openvas |
Source | Link |
---|---|
alas | www.alas.aws.amazon.com/ALAS-2014-310.html |
# SPDX-FileCopyrightText: 2015 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.120361");
script_cve_id("CVE-2014-0467");
script_tag(name:"creation_date", value:"2015-09-08 11:24:36 +0000 (Tue, 08 Sep 2015)");
script_version("2025-01-23T05:37:38+0000");
script_tag(name:"last_modification", value:"2025-01-23 05:37:38 +0000 (Thu, 23 Jan 2025)");
script_tag(name:"cvss_base", value:"5.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_name("Amazon Linux: Security Advisory (ALAS-2014-310)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2015 Greenbone AG");
script_family("Amazon Linux Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/amazon_linux", "ssh/login/release");
script_xref(name:"Advisory-ID", value:"ALAS-2014-310");
script_xref(name:"URL", value:"https://alas.aws.amazon.com/ALAS-2014-310.html");
script_tag(name:"summary", value:"The remote host is missing an update for the 'mutt' package(s) announced via the ALAS-2014-310 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"A heap-based buffer overflow flaw was found in the way mutt processed certain email headers. A remote attacker could use this flaw to send an email with specially crafted headers that, when processed, could cause mutt to crash or, potentially, execute arbitrary code with the permissions of the user running mutt. (CVE-2014-0467)");
script_tag(name:"affected", value:"'mutt' package(s) on Amazon Linux.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "AMAZON") {
if(!isnull(res = isrpmvuln(pkg:"mutt", rpm:"mutt~1.5.20~4.20091214hg736b6a.7.amzn1", rls:"AMAZON"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"mutt-debuginfo", rpm:"mutt-debuginfo~1.5.20~4.20091214hg736b6a.7.amzn1", rls:"AMAZON"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. ContactΒ us for a demo andΒ discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo