49 matches found
Mandriva Update for mutt MDVSA-2012:048 (mutt)
Check for the Version of mutt OpenVAS Vulnerability Test Mandriva Update for mutt MDVSA-2012:048 mutt Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Mandriva Linux Security Advisory : mutt (MDVSA-2012:048)
A vulnerability has been found and corrected in mutt : Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability...
Sybase OneBridge Mobile Data Suite format string vulnerability
Format string vulnerability during IMAPs/SMTPs requests parsing...
AZL-36964 CVE-2011-1429 affecting package mutt 2.2.12-1
Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766...
CVE-2011-1429
Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766...
Design/Logic Flaw
Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766...
CVE-2011-1429
Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766...
CVE-2011-1429
CVE-2011-1429 affects Mutt: the client failed to verify that the TLS/SSL server hostname matches the subject CN of the X.509 certificate when using SMTPS. Concrete details in connected docs show affected package versions (Mutt around 1.5.16–1.5.19 family; Oracle Linux 6 ELSA-2011-0959 and Miracle...
CVE-2011-1429
Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766...