5802 matches found
Updated mutt packages fix a security vulnerability
Mutt before 2.0.2 did not ensure that $sslforcetls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted...
OPENSUSE-SU-2020:2141-1 Security update for mutt
This update for mutt fixes the following issues: - CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113 This update was imported from...
OPENSUSE-SU-2020:2128-1 Security update for mutt
This update for mutt fixes the following issues: - CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113 This update was imported from...
Security update for mutt (important)
openSUSE Security Update: Security update for mutt Announcement ID: openSUSE-SU-2020:2128-1 Rating: important References: 1179035 1179113 Cross-References: CVE-2020-28896 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Description...
SUSE-SU-2020:3568-1 Security update for mutt
This update for mutt fixes the following issues: - CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113...
CVE-2019-19869
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...
CVE-2019-19869
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...
Design/Logic Flaw
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...
CVE-2019-19869
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...
CVE-2019-19869
CVE-2019-19869 affects B&R Industrial Automation APROL (before R4.2 V7.08). The issue allows PVs to be changed via the IosHttp service and JSON interface in unencrypted form, impacting data integrity. No explicit exploit details or in-wild exploitation are provided in the documents. Remediation/v...
CVE-2020-28896
Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $sslforcetls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials...
CVE-2020-28896
CVE-2020-28896 affects Mutt and NeoMutt where, during IMAP initial responses, the client did not properly consult $ssl_force_tls and/or close the connection, allowing potential exposure of authentication credentials to an unencrypted channel or a Man‑in‑the‑Middle. The issue occurs in Mutt up to ...
CVE-2020-28896
Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $sslforcetls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials...
FreeBSD : mutt -- authentication credentials being sent over an unencrypted connection (dc132c91-2b71-11eb-8cfd-4437e6ad11c4)
Kevin J. McCarthy reports : Mutt had incorrect error handling when initially connecting to an IMAP server, which could result in an attempt to authenticate without enabling TLS. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...
PT-2020-6267 · Neomutt +9 · Neomutt +9
Name of the Vulnerable Software and Affected Versions: Mutt versions prior to 2.0.2 NeoMutt versions prior to 2020-11-20 Description: The issue is related to insufficient protection of registration data, which could allow a remote attacker to access confidential data. If an IMAP server's initial...
mutt -- authentication credentials being sent over an unencrypted connection
Kevin J. McCarthy reports: Mutt had incorrect error handling when initially connecting to an IMAP server, which could result in an attempt to authenticate without enabling TLS...
SUSE-SU-2020:3433-1 Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94107 fixes one issue. The following security issue was fixed: - CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted bnc1177513...
[SECURITY] Fedora 32 Update: krb5-1.18.2-29.fc32
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...
MGASA-2020-0418 Updated java-1.8.0-openjdk packages fix security vulnerabilities
High memory usage during deserialization of Proxy class with many interfaces. CVE-2020-14779 Credentials sent over unencrypted LDAP connection. CVE-2020-14781 Certificate blacklist bypass via alternate certificate encodings. CVE-2020-14782 Integer overflow leading to out-of-bounds access...