398 matches found
CVE-2018-14349
CVE-2018-14349 affects Mutt before 1.10.1 and NeoMutt before 2018-07-16. The issue is in imap/command.c where a NO response without a message is mishandled. Public references indicate this vulnerability is addressed in fixed releases (Mutt 1.10.1+, NeoMutt post-2018-07-16). The CVSS data in the i...
CVE-2018-14362
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character...
CVE-2018-14352
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imapquotestring in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow...
CVE-2018-14356
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID...
CVE-2018-14353
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imapquotestring in imap/util.c has an integer underflow...
CVE-2018-14357
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...
CVE-2018-14350
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field...
CVE-2018-14356
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID...
CVE-2018-14351
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size...
CVE-2018-14354
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription...
CVE-2018-14353
CVE-2018-14353 is an integer underflow in the function imap_quote_string in imap/util.c , affecting Mutt < 1.10.1 and NeoMutt
CVE-2018-14357
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...
CVE-2018-14355
CVE-2018-14355 affects Mutt before 1.10.1 and NeoMutt before 2018-07-16. The issue lies in imap/util.c mishandling ".." directory traversal in a mailbox name, enabling potential exposure due to path traversal. Public references note multiple distributions released fixes: upstream patches for Mutt...
CVE-2018-14357
CVE-2018-14357 affects Mutt (before 1.10.1) and NeoMutt (before 2018-07-16). The flaw lets a remote IMAP server cause arbitrary commands to execute via backquote characters in the mailboxes command tied to automatic subscriptions. Root cause: improper handling/escaping of backquotes in mailbox-re...
CVE-2018-14363
CVE-2018-14363 affects NeoMutt prior to 2018-07-16. The issue is in newsrc.c where it does not properly restrict the '/' character, which may interact unsafely with cache pathnames. The vulnerability could impact the integrity of cache-related data; the OpenVAS/SUSE advisories indicate numerous r...
CVE-2018-14360
An issue was discovered in NeoMutt before 2018-07-16. nntpaddgroup in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage...
CVE-2018-14351
CVE-2018-14351 affects Mutt before 1.10.1 and NeoMutt before 2018-07-16, where imap/command.c mishandles a long IMAP status mailbox literal count size. This could lead to parsing issues in IMAP responses and is reported with high severity (CVSS v3.1: CRITICAL, base score 9.8). Affected components...
CVE-2018-14360
CVE-2018-14360 affects NeoMutt (pre-2018-07-16) and is caused by a stack-based buffer overflow in nntp_add_group in newsrc.c due to incorrect sscanf usage. The vulnerability could allow arbitrary code execution or crash under certain NNTP interactions, per the related advisories and patch referen...