Mutt BROWSE_GET_NAMESPACE IMAP名称空间处理远程溢出漏洞

BUGTRAQ ID: 18642 CVECAN ID: CVE-2006-3242 Mutt是一个小型但功能强大的基于文本的MIME邮件客户端。 Mutt处理畸形邮件时存在漏洞，远程攻击者可能利用此漏洞在客户端上执行任意指令。 Mutt的browse.c文件的browsegetnamespace函数中存在缓冲区溢出漏洞。如果恶意的IMAP服务器向Mutt发送了超长的名称空间的话，就会触发这个漏洞，导致客户端崩溃或执行任意指令。 Mutt Mutt 1.4.2 Gentoo Linux 厂商补丁： Mutt ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

openSUSE 10 Security Update : mutt (mutt-1701)

Mutt had a buffer overflow in IMAP namespace parsing code which may open a possible remote vulnerability CVE-2006-3242. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mutt-1701. The text...

Unfixed XSS vulnerability at flortaveras.mfr.mlxchange.com

Security researcher Norehem, has submitted on 09/08/2007 a cross-site-scripting XSS vulnerability affecting flortaveras.mfr.mlxchange.com, which at the time of submission ranked 3242 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/08/2007. I...

Unfixed XSS vulnerability at awp272503698.mfr.mlxchange.com

Security researcher Norehem, has submitted on 09/08/2007 a cross-site-scripting XSS vulnerability affecting awp272503698.mfr.mlxchange.com, which at the time of submission ranked 3242 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/08/2007. ...

Unfixed XSS vulnerability at isabella.sef.mlxchange.com

Security researcher Norehem, has submitted on 09/08/2007 a cross-site-scripting XSS vulnerability affecting isabella.sef.mlxchange.com, which at the time of submission ranked 3242 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/08/2007. It i...

CVE-2007-3242

The CVE-2007-3242 entry concerns the Menu Manager Mod for WebAPP WebAPP NE (versions 0.9.9.3.3–0.9.9.8) and WebAPP.org WebAPP before 0.9.9.6. The vulnerability allows remote authenticated users to execute arbitrary commands by injecting shell metacharacters into the titles of items in a personal ...

Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : mutt (SSA:2006-207-01)

New mutt packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a possible security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-207-01. Th...

[slackware-security] mutt

New mutt packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a possible security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-3242 Here are the details from the...

[SECURITY] [DSA 1108-1] New mutt packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1108-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff Jul 11th, 2006 http://www.debian.org/security/faq -...

CentOS 3 / 4 : ethereal (CESA-2005:809)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

CVE-2006-3242

Mutt (affected: 1.4.2.1 and earlier) has a stack-based buffer overflow in browse_get_namespace within imap/browse.c. The flaw allows a remote attacker to crash the client or potentially execute arbitrary code by sending long IMAP namespaces. This CVE (CVE-2006-3242) is linked to multiple advisori...

ethereal security update

CentOS Errata and Security Advisory CESA-2005:809-01 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network...

RHEL 2.1 / 3 / 4 : ethereal (RHSA-2005:809)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

CVE-2005-3242

CVE-2005-3242 affects Ethereal 0.10.12 and earlier; remote attackers can cause a denial of service via memory corruption in the IrDA and SMB dissectors when SMB payload reassembly is enabled. Publicly provided documents confirm the vulnerability in Ethereal and describe the affected dissectors an...

ethereal security update

CentOS Errata and Security Advisory CESA-2005:809 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...