Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.52528
Category:FreeBSD Local Security Checks
Title:FreeBSD Ports: mutt, ja-mutt
Summary:NOSUMMARY
Description:Description:
The remote host is missing an update to the system
as announced in the referenced advisory.

The following packages are affected:
mutt
ja-mutt

CVE-2004-0078
Buffer overflow in the index menu code (menu_pad_string of menu.c) for
Mutt 1.4.1 and earlier allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via certain mail
messages.

Solution:
Update your system with the appropriate patches or
software upgrades.

http://www.mutt.org/news.html
http://www.vuxml.org/freebsd/67c05283-5d62-11d8-80e3-0020ed76ef5a.html

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: BugTraq ID: 9641
Common Vulnerability Exposure (CVE) ID: CVE-2004-0078
http://www.securityfocus.com/bid/9641
Bugtraq: 20040211 Mutt-1.4.2 fixes buffer overflow. (Google Search)
http://marc.info/?l=bugtraq&m=107651677817933&w=2
Bugtraq: 20040215 LNSA-#2004-0001: mutt remote crash (Google Search)
http://marc.info/?l=bugtraq&m=107696262905039&w=2
Bugtraq: 20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt) (Google Search)
http://marc.info/?l=bugtraq&m=107884956930903&w=2
Caldera Security Advisory: CSSA-2004-013.0
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010
http://www.osvdb.org/3918
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838
http://www.redhat.com/support/errata/RHSA-2004-050.html
http://www.redhat.com/support/errata/RHSA-2004-051.html
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053
XForce ISS Database: mutt-index-menu-bo(15134)
https://exchange.xforce.ibmcloud.com/vulnerabilities/15134
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.