Red Hat Security AdvisoryRHSA-2007:0386
mutt security update
Released 2007-06-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 mutt-5:1.4.1-5.el3, mutt-5:1.4.1-5.el3.i386
- Red Hat Enterprise Linux (v. 5 server) mutt-5:1.4.2.2-3.0.2.el5, mutt-5:1.4.2.2-3.0.2.el5.i386, mutt-5:1.4.2.2-3.0.2.el5.ia64 +1
- Red Hat Enterprise Linux AS version 3 mutt-5:1.4.1-5.el3, mutt-5:1.4.1-5.el3.i386, mutt-5:1.4.1-5.el3.ia64 +1
- Red Hat Enterprise Linux AS version 4 mutt-5:1.4.1-12.0.3.el4, mutt-5:1.4.1-12.0.3.el4.i386, mutt-5:1.4.1-12.0.3.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) mutt-5:1.4.2.2-3.0.2.el5, mutt-5:1.4.2.2-3.0.2.el5.i386
- Red Hat Enterprise Linux Desktop version 4 mutt-5:1.4.1-12.0.3.el4, mutt-5:1.4.1-12.0.3.el4.i386
- Red Hat Enterprise Linux ES version 3 mutt-5:1.4.1-5.el3, mutt-5:1.4.1-5.el3.i386, mutt-5:1.4.1-5.el3.ia64
- Red Hat Enterprise Linux ES version 4 mutt-5:1.4.1-12.0.3.el4, mutt-5:1.4.1-12.0.3.el4.i386, mutt-5:1.4.1-12.0.3.el4.ia64
- Red Hat Enterprise Linux WS version 3 mutt-5:1.4.1-5.el3, mutt-5:1.4.1-5.el3.i386, mutt-5:1.4.1-5.el3.ia64
- Red Hat Enterprise Linux WS version 4 mutt-5:1.4.1-12.0.3.el4, mutt-5:1.4.1-12.0.3.el4.i386, mutt-5:1.4.1-12.0.3.el4.ia64
Fixes 3 records
Priority LOW 18
Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.
CVSS 2.0LOW 3.5· Local · Low privileges · Interaction — · EPSS 0.00799 · Published 2007-05-15 · Fixed
Priority LOW 18
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02423 · Published 2007-04-16 · Fixed
Priority LOW 8
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of th…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00362 · Published 2006-10-16 · Fixed
THREATIST.IORead the docs