PT-2018-3302 · Mutt +7 · Mutt +7

Name of the Vulnerable Software and Affected Versions: Mutt versions prior to 1.10.1 NeoMutt versions prior to 2018-07-16 Description: The issue allows remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic...

PT-2018-3303 · Mutt +5 · Mutt +5

Name of the Vulnerable Software and Affected Versions: Mutt versions prior to 1.10.1 NeoMutt versions prior to 2018-07-16 Description: The issue is related to a stack-based buffer overflow in the imap/message.c file of the Mutt and NeoMutt email clients. This overflow occurs when handling a FETCH...

GLSA-201701-04 : Mutt: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-201701-04 Mutt: Heap-based buffer overflow A heap-based buffer overflow was discovered in Mutts muttsubstrdup function. Impact : A remote attacker could cause a Denial of Service condition. Workaround : There is no known workaroun...

Mutt: Heap-based buffer overflow

Background Mutt is a small but very powerful text-based mail client. Description A heap-based buffer overflow was discovered in Mutt’s muttsubstrdup function. Impact A remote attacker could cause a Denial of Service condition. Workaround There is no known workaround at this time. Resolution All...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the mutt package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2006-5298

The muttadvmktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safefopen function cal...

CVE-2005-2642

Buffer overflow in the muttdecodexbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext...

SUSE: Security Advisory for mutt (SUSE-SU-2015:0012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for mutt (SUSE-SU-2014:0471-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2007-0386)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2014-0304)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-0959)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201406-05

Gentoo Linux Local Security Checks GLSA 201406-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Amazon Linux: Security Advisory (ALAS-2014-310)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2019-6475

Name of the Vulnerable Software and Affected Versions Mutt versions prior to 1.5.20 patch 7 Description The issue allows an attacker to cause a denial of service via a series of requests to mutt temporary files. Recommendations For versions prior to 1.5.20 patch 7, update to version 1.5.20 patch ...

SUSE SLED12 / SLES12 Security Update : mutt (SUSE-SU-2015:0012-1)

mutt was updated to fix one security issue. This security issue was fixed : - Heap-based buffer overflow in muttsubstrdup CVE-2014-9116. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block...

Tails 1.4 - The Amnesic Incognito Live System

Tails is a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity , and helps you to: use the Internet anonymously and circumvent censorship ; all connections to the Internet are forced to go through the...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the mutt-utf8 package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

SuSE 11.3 Security Update : mutt (SAT Patch Number 10435)

The mutt mail client has been updated to fix a heap-based buffer overflow in muttsubstrdup. CVE-2014-9116 Additionally, a patch has been added to allow users to override the 'From' address when executing mutt in batch mode. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

[slackware-security] mutt

New mutt packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mutt-1.5.23-i486-2slack14.1.txz: Rebuilt. Patched a vulnerability where malformed headers can cause mutt to crash. For mo...