1483 matches found
CVE-2018-14355
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name...
CVE-2018-14354
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription...
DEBIAN-CVE-2018-14359
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data...
ALPINE-CVE-2018-14355
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name...
CVE-2018-14353
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imapquotestring in imap/util.c has an integer underflow...
CVE-2018-14352
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imapquotestring in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow...
ALPINE-CVE-2018-14350
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field...
ALPINE-CVE-2018-14354
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription...
DEBIAN-CVE-2018-14362
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character...
Design/Logic Flaw
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character...
DEBIAN-CVE-2018-14356
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID...
CVE-2018-14350
CVE-2018-14350 : In Mutt before 1.10.1 and NeoMutt before 2018-07-16, imap/message.c contains a stack-based buffer overflow when handling a FETCH response with a long INTERNALDATE. This can allow arbitrary code execution. Affected versions: Mutt < 1.10.1; NeoMutt
CVE-2018-14354
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription...
CVE-2018-14349
CVE-2018-14349 affects Mutt before 1.10.1 and NeoMutt before 2018-07-16. The issue is in imap/command.c where a NO response without a message is mishandled. Public references indicate this vulnerability is addressed in fixed releases (Mutt 1.10.1+, NeoMutt post-2018-07-16). The CVSS data in the i...
CVE-2018-14362
CVE-2018-14362 affects Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may interact unsafely with message-cache pathnames, demonstrated by a '/' character, creating a path-traversal vulnerability in message-cache handling. No exploitation details are provid...
CVE-2018-14349
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message...
CVE-2018-14350
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field...
CVE-2018-14356
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID...
CVE-2018-14356
CVE-2018-14356 affects mutt prior to 1.10.1 and NeoMutt prior to 2018-07-16; root cause is pop.c mishandling a zero-length UID. CVSS data in the entry indicate HIGH/CRITICAL impact (network attack, no authentication, no user interaction). Connected sources confirm the issue but do not provide a v...