Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-1429HistoryMar 16, 2011 - 10:55 p.m.
CVE-2011-1429
2011-03-1622:55:04
Debian Security Bug Tracker
security-tracker.debian.org
14
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.003
Percentile
66.2%
Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | mutt | < 1.5.21-5 | mutt_1.5.21-5_all.deb |
| Debian | 11 | all | mutt | < 1.5.21-5 | mutt_1.5.21-5_all.deb |
| Debian | 999 | all | mutt | < 1.5.21-5 | mutt_1.5.21-5_all.deb |
| Debian | 13 | all | mutt | < 1.5.21-5 | mutt_1.5.21-5_all.deb |
Related
openvas
openvas
Mandriva Update for mutt MDVSA-2012:048 (mutt)
2012-08-03 00:00:00
FreeBSD Ports: mutt-devel
2012-04-30 00:00:00
Mandriva Update for mutt MDVSA-2012:048 (mutt)
2012-08-03 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : mutt (MDVSA-2012:048)
2012-04-03 00:00:00
FreeBSD : mutt-devel -- failure to check SMTP TLS server certificate (49314321-7fd4-11e1-9582-001b2134ef46)
2012-04-09 00:00:00
RHEL 6 : mutt (RHSA-2011:0959)
2011-07-20 00:00:00
prion
prion
Design/Logic Flaw
2011-03-16 22:55:00
Design/Logic Flaw
2009-10-23 19:30:00
cvelist
cvelist
CVE-2011-1429
2011-03-16 22:00:00
CVE-2009-3766
2009-10-23 19:00:00
ubuntucve
ubuntucve
CVE-2011-1429
2011-03-16 00:00:00
CVE-2009-3766
2009-10-23 00:00:00
nvd
nvd
CVE-2011-1429
2011-03-16 22:55:04
CVE-2009-3766
2009-10-23 19:30:00
cve
cve
CVE-2011-1429
2011-03-16 22:55:04
CVE-2009-3766
2009-10-23 19:30:00
securityvulns
securityvulns
mutt SSL certificate validation vulnerability
2011-10-01 00:00:00
[USN-1221-1] Mutt vulnerability
2011-10-01 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: mutt-1.5.21-5.fc13
2011-06-15 05:40:17
[SECURITY] Fedora 15 Update: mutt-1.5.21-5.fc15
2011-06-11 04:18:43
[SECURITY] Fedora 14 Update: mutt-1.5.21-5.fc14
2011-06-11 04:19:42
redhat
redhat
(RHSA-2011:0959) Moderate: mutt security update
2011-07-19 00:00:00
oraclelinux
oraclelinux
mutt security update
2011-07-19 00:00:00
freebsd
freebsd
mutt-devel -- failure to check SMTP TLS server certificate
2012-03-08 00:00:00
debiancve
debiancve
CVE-2009-3766
2009-10-23 19:30:00
ubuntu
ubuntu
Mutt vulnerability
2011-09-29 00:00:00
cbl_mariner
cbl_mariner
CVE-2011-1429 affecting package mutt 2.2.12-1
2024-10-01 09:12:11
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.003
Percentile
66.2%
Related for DEBIANCVE:CVE-2011-1429