Code injection

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

UBUNTU-CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

CVE-2020-14154

CVE-2020-14154 affects mutt prior to 1.14.3. In this version, the client proceeds with a connection after a GnuTLS certificate prompt where the user refuses an expired intermediate certificate, enabling potential trust bypass in TLS handshakes. The issue has been observed in multiple advisories (...

CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

DEBIAN-CVE-2020-14093

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

CVE-2020-14093

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

CVE-2020-14093

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

Code injection

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

CVE-2020-14093

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

UBUNTU-CVE-2020-14093

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

CVE-2020-14093

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

CVE-2020-14093

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

CVE-2020-14093

CVE-2020-14093 affects Mutt prior to 1.14.3, enabling an IMAP fcc/postpone MITM via a PREAUTH response. The issue is documented across multiple advisories (Debian/Red Hat and vendor notes) and is paired with related TLS/STARTTLS handling problems in the same family (e.g., CVE-2020-14954). The roo...

CVE-2020-14093

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

CVE-2020-14093

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

PT-2020-5912

Name of the Vulnerable Software and Affected Versions: Mutt versions prior to 1.14.3 Description: The issue is related to insufficient data protection in the Mutt email client, allowing a remote attacker to perform a man-in-the-middle attack. Specifically, Mutt before version 1.14.3 is vulnerable...

CVE-2020-14093: Cleartext Transmission of Sensitive Information

Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...

PT-2020-3021

Name of the Vulnerable Software and Affected Versions Mutt versions prior to 1.14.3 Description The issue is related to incorrect certificate authentication. It may allow a remote attacker to perform a man-in-the-middle attack. If a user rejects an expired intermediate certificate in response to ...