7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.087 Low
EPSS
Percentile
93.9%
Mutt is a text-mode mail user agent.
A bug was found in the index menu code in versions of mutt. A remote
attacker could send a carefully crafted mail message that can cause mutt
to segfault and possibly execute arbitrary code as the victim. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2004-0078 to this issue.
It is recommended that all mutt users upgrade to these updated packages,
which contain a backported security patch and are not vulnerable to this issue.
Red Hat would like to thank Niels Heinen for reporting this issue.
Note: mutt-1.2.5.1 in Red Hat Enterprise Linux 2.1 is not vulnerable to
this issue.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | any | ia64 | mutt | < 1.4.1-3.4 | mutt-1.4.1-3.4.ia64.rpm |