Test ID:	1.3.6.1.4.1.25623.1.0.51080
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2004:050
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2004:050. Mutt is a text-mode mail user agent. A bug was found in the index menu code in versions of mutt. A remote attacker could send a carefully crafted mail message that can cause mutt to segfault and possibly execute arbitrary code as the victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0078 to this issue. It is recommended that all mutt users upgrade to these updated packages, which contain a backported security patch and are not vulnerable to this issue. Red Hat would like to thank Niels Heinen for reporting this issue. Note: mutt-1.2.5.1 in Red Hat Enterprise Linux 2.1 is not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2004-050.html Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 9641 Common Vulnerability Exposure (CVE) ID: CVE-2004-0078 http://www.securityfocus.com/bid/9641 Bugtraq: 20040211 Mutt-1.4.2 fixes buffer overflow. (Google Search) http://marc.info/?l=bugtraq&m=107651677817933&w=2 Bugtraq: 20040215 LNSA-#2004-0001: mutt remote crash (Google Search) http://marc.info/?l=bugtraq&m=107696262905039&w=2 Bugtraq: 20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt) (Google Search) http://marc.info/?l=bugtraq&m=107884956930903&w=2 Caldera Security Advisory: CSSA-2004-013.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010 http://www.osvdb.org/3918 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838 http://www.redhat.com/support/errata/RHSA-2004-050.html http://www.redhat.com/support/errata/RHSA-2004-051.html http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053 XForce ISS Database: mutt-index-menu-bo(15134) https://exchange.xforce.ibmcloud.com/vulnerabilities/15134
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.