Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Gentoo: 202403-25 Urgent: Mutt Remote Code Execution Vulnerability

gentoo
Calendar Grey March 24, 2003
Dist Gentoo Esm H88
Gentoo Linux security advisory on mutt, underscoring significant flaws related to buffer overflow vulnerabilities that could allow for harmful command execution by attackers.
By controlling a malicious IMAP server and providing a specially crafted folder, an attacker can crash the mail reader and possibly force execution of arbitrary commands on the vul...

Summary


- - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200303-19
- - ---------------------------------------------------------------------

- - ---------------------------------------------------------------------

- From advisory:

"By controlling a malicious IMAP server and providing a specially 
crafted folder, an attacker can crash the mail reader and possibly 
force execution of arbitrary commands on the vulnerable system with 
the privileges of the user running Mutt."

Read the full advisory at: 


SOLUTION

It is recommended that all Gentoo Linux users who are running
net-mail/mutt upgrade to mutt-1.4.1 as follows:

emerge sync
emerge mutt
emerge clean

- - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at   
- - ---------------------------------------------------------------------

1.4.1

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow command execution exploit local exploit mutt

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

PACKAGE : mutt
SUMMARY : buffer overflow
DATE : 2003-03-22 18:19 UTC
EXPLOIT : local
VERSIONS AFFECTED : <1.4.1 : fixed version>=1.4.1
CVE : CAN-2003-0140

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow command execution exploit local exploit mutt

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here