PT-2002-1110 · Mutt · Mutt

Publicado 2002-01-03 · Atualizado 2016-10-18 · CVE-2002-0001

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mutt versions 1.2.0 through 1.2.5 mutt versions 1.3.x through 1.3.24

Description The issue allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list. This is due to a vulnerability in the RFC822 address parser.

Recommendations For mutt versions 1.2.0 through 1.2.5, update to version 1.2.5.1 or later. For mutt versions 1.3.x through 1.3.24, update to version 1.3.25 or later.

Correção

Identificadores relacionados

CVE-2002-0001

Produtos afetados

Mutt

Referências · 12

• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt · Aviso do Fabricante
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0001 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2002-003.html · Correção, Aviso do Fabricante
• http://mutt.org/announce/mutt-1.2.5.1-1.3.25.html · Nota
• http://securityfocus.com/bid/3774 · Nota
• http://novell.com/linux/security/advisories/2002_001_mutt_txt.html · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=100994648918287&w=2 · Nota
• http://online.securityfocus.com/advisories/3778 · Aviso do Fabricante
• http://debian.org/security/2002/dsa-096 · Correção, Aviso do Fabricante
• http://iss.net/security_center/static/7759.php · Nota