Lucene search

K

Amazon Linux: Security Advisory (ALAS-2014-310)

πŸ—“οΈΒ 08 Sep 2015Β 00:00:00Reported byΒ Copyright (C) 2015 Greenbone AGTypeΒ 
openvas
Β openvas
πŸ”—Β plugins.openvas.orgπŸ‘Β 17Β Views

The remote host is missing an update for the 'mutt' package(s) announced via the ALAS-2014-310 advisory. A heap-based buffer overflow flaw was found in the way mutt processed certain email headers, which could allow remote attackers to crash mutt or execute arbitrary code. The affected package is 'mutt' on Amazon Linux. Please install the updated package(s

Show more
Related
Refs
Code
ReporterTitlePublishedViews
Family
OpenVAS
CentOS Update for mutt CESA-2014:0304 centos6
20 Mar 201400:00
–openvas
OpenVAS
CentOS Update for mutt CESA-2014:0304 centos6
20 Mar 201400:00
–openvas
OpenVAS
Oracle: Security Advisory (ELSA-2014-0304)
6 Oct 201500:00
–openvas
OpenVAS
Fedora Update for mutt FEDORA-2014-6408
19 May 201400:00
–openvas
OpenVAS
Gentoo Security Advisory GLSA 201406-05
29 Sep 201500:00
–openvas
OpenVAS
Mageia: Security Advisory (MGASA-2014-0141)
28 Jan 202200:00
–openvas
OpenVAS
Debian Security Advisory DSA 2874-1 (mutt - security update)
12 Mar 201400:00
–openvas
OpenVAS
Fedora Update for mutt FEDORA-2014-5880
12 May 201400:00
–openvas
OpenVAS
SUSE: Security Advisory for mutt (SUSE-SU-2014:0471-1)
13 Oct 201500:00
–openvas
OpenVAS
RedHat Update for mutt RHSA-2014:0304-01
20 Mar 201400:00
–openvas
Rows per page
# SPDX-FileCopyrightText: 2015 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.120361");
  script_cve_id("CVE-2014-0467");
  script_tag(name:"creation_date", value:"2015-09-08 11:24:36 +0000 (Tue, 08 Sep 2015)");
  script_version("2025-01-23T05:37:38+0000");
  script_tag(name:"last_modification", value:"2025-01-23 05:37:38 +0000 (Thu, 23 Jan 2025)");
  script_tag(name:"cvss_base", value:"5.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:P");

  script_name("Amazon Linux: Security Advisory (ALAS-2014-310)");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2015 Greenbone AG");
  script_family("Amazon Linux Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/amazon_linux", "ssh/login/release");

  script_xref(name:"Advisory-ID", value:"ALAS-2014-310");
  script_xref(name:"URL", value:"https://alas.aws.amazon.com/ALAS-2014-310.html");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'mutt' package(s) announced via the ALAS-2014-310 advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"A heap-based buffer overflow flaw was found in the way mutt processed certain email headers. A remote attacker could use this flaw to send an email with specially crafted headers that, when processed, could cause mutt to crash or, potentially, execute arbitrary code with the permissions of the user running mutt. (CVE-2014-0467)");

  script_tag(name:"affected", value:"'mutt' package(s) on Amazon Linux.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "AMAZON") {

  if(!isnull(res = isrpmvuln(pkg:"mutt", rpm:"mutt~1.5.20~4.20091214hg736b6a.7.amzn1", rls:"AMAZON"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"mutt-debuginfo", rpm:"mutt-debuginfo~1.5.20~4.20091214hg736b6a.7.amzn1", rls:"AMAZON"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. ContactΒ us for a demo andΒ discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
08 Sep 2015 00:00Current
6.4Medium risk
Vulners AI Score6.4
CVSS25
EPSS0.039
17
.json
Report