Lucene search
+L

373 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.7 views

The vulnerability of the nntp.c file of the NeoMutt email client, related to errors in processing input data, allows a hacker to execute arbitrary code.

The vulnerability of the nntp.c file of the NeoMutt email client is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.02504EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.6 views

The vulnerability of Mutt and NeoMutt email clients, related to the lack of data cleaning at the management level, allows attackers to execute arbitrary commands.

The vulnerability of Mutt and NeoMutt email clients is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS7.8AI score0.04954EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.7 views

The vulnerability of Mutt and NeoMutt email clients, related to buffer overflows, allows attackers to execute arbitrary code.

The vulnerability of Mutt and NeoMutt email clients is related to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.04131EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.8 views

The vulnerabilities of Mutt and NeoMutt email clients, related to errors in processing input data, allow a hacker to execute arbitrary code.

The vulnerability of Mutt and NeoMutt email clients is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.03166EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.10 views

The vulnerability of the imap_quote_string function in the imap/util.c file of email clients Mutt and NeoMutt, related to a countable loss of significance, allows a hacker to execute arbitrary code.

The vulnerability of the imapquotestring function in the imap/util.c file of email clients such as Mutt and NeoMutt is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.03698EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.5 views

The vulnerability of Mutt and NeoMutt email clients, related to the lack of data cleaning at the management level, allows attackers to execute arbitrary commands.

The vulnerability of Mutt and NeoMutt email clients is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS8.1AI score0.06229EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.9 views

The vulnerability of the sscanf function in the newsrc.c file of the NeoMutt email client allows a hacker to execute arbitrary code due to errors in memory object handling.

The vulnerability of the sscanf function in the newsrc.c file of the NeoMutt email client is related to errors in processing objects in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.02651EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.7 views

The vulnerability of the imap/message.c file in Mutt and NeoMutt clients lies in the overflow of the buffer in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the imap/message.c file in Mutt and NeoMutt is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.9AI score0.03915EPSS
SaveExploits0References6Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/12/04 12:0 a.m.38 views

EulerOS 2.0 SP2 : mutt (EulerOS-SA-2019-2508)

According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.CVE-2018-143...

9.8CVSS7.8AI score0.0502EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.13 views

The vulnerability in the newsrc.c component of the NeoMutt email client allows a hacker to compromise the integrity of the protected information.

The vulnerability in the newsrc.c component of the NeoMutt email client exists due to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

7.8CVSS7.2AI score0.0218EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.7 views

The vulnerability in the imap/util.c component of the Mutt and NeoMutt email clients allows a hacker to gain unauthorized access to protected information.

The vulnerability of the imap/util.c component in Mutt and NeoMutt emails clients is related to errors in handling references to the “..” directory in the email mailbox name. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to information...

5.3CVSS6.3AI score0.03317EPSS
SaveExploits0References9Affected Software3
ossfuzz
ossfuzz
added 2019/11/11 8:15 a.m.20 views

neomutt:address-fuzz: Heap-use-after-free in mutt_str_strdup

Project: https://github.com/neomutt/neomutt.git Detailed Report: https://oss-fuzz.com/testcase?key=5918370260320256 Project: neomutt Fuzzing Engine: libFuzzer Fuzz Target: address-fuzz Job Type: libfuzzerasanneomutt Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.33 views

NewStart CGSL MAIN 4.05 : mutt Multiple Vulnerabilities (NS-SA-2019-0140)

The remote NewStart CGSL host, running version MAIN 4.05, has mutt packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters...

9.8CVSS8.1AI score0.06229EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.6 views

The vulnerability of Mutt and NeoMutt email clients, related to the execution of operations outside the data buffer, allows attackers to cause service failures.

The vulnerability in the imap/message.c file of the Mutt and NeoMutt email clients relates to the execution of operations outside the data buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

9.8CVSS7.6AI score0.0502EPSS
SaveExploits0References5Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:0 a.m.36 views

openSUSE Security Update : mutt (openSUSE-2019-569)

This update for mutt fixes the following issues : Security issues fixed : - bsc1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. - CVE-2018-14353: Fix imapquotestring in imap/util.c that has a...

9.8CVSS8.3AI score0.09694EPSS
SaveExploits1References33
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:0 a.m.4 views

The vulnerability in the code of the Mutt and NeoMutt email clients allows a hacker to gain unauthorized access to protected information.

The vulnerability in the code of the Mutt and NeoMutt email clients lies in the absence of a prohibition for “unsafe” characters such as the slash character “/” in path names to cached messages. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information throu...

9.8CVSS7.2AI score0.03667EPSS
SaveExploits0References5Affected Software2
Veracode
Veracode
added 2019/01/15 9:25 a.m.43 views

Remote Code Execution (RCE)

mutt is vulnerable to remote code execution RCE attacks. The vulnerability exists as an issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with...

9.8CVSS9.9AI score0.06229EPSS
SaveExploits0References13Affected Software4
Tenable Nessus
Tenable Nessus
added 2019/01/02 12:0 a.m.21 views

SUSE SLED15 / SLES15 Security Update : mutt (SUSE-SU-2018:2085-1)

This update for mutt fixes the following issues: Security issues fixed : - bsc1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. - CVE-2018-14353: Fix imapquotestring in imap/util.c that has an...

9.8CVSS8.3AI score0.09694EPSS
SaveExploits1References50
Tenable Nessus
Tenable Nessus
added 2018/10/31 12:0 a.m.31 views

GLSA-201810-07 : Mutt, NeoMutt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201810-07 Mutt, NeoMutt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mutt, and NeoMutt. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user t...

9.8CVSS7.8AI score0.06229EPSS
SaveExploits0References13
Gentoo Linux
Gentoo Linux
added 2018/10/30 12:0 a.m.511 views

Mutt, NeoMutt: Multiple vulnerabilities

Background Mutt is a small but very powerful text-based mail client. NeoMutt is a command line mail reader or MUA. It’s a fork of Mutt with added features. Description Multiple vulnerabilities have been discovered in Mutt, and NeoMutt. Please review the CVE identifiers referenced below for detail...

9.8CVSS9.3AI score0.06229EPSS
SaveExploits0
Rows per page
Query Builder