Lucene search
FreeBSD49314321-7FD4-11E1-9582-001B2134EF46HistoryMar 08, 2012 - 12:00 a.m.
mutt-devel -- failure to check SMTP TLS server certificate
2012-03-0800:00:00
vuxml.freebsd.org
10
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS
0.003
Percentile
66.2%
Dave B reports on Full Disclosure:
It seems that mutt fails to check the validity of a SMTP
servers certificate during a TLS connection. […]
This means that an attacker could potentially MITM a
mutt user connecting to their SMTP server even when the
user has forced a TLS connection.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | mutt-devel | < 1.5.21_4 | UNKNOWN |
References
Related
fedora
fedora
[SECURITY] Fedora 14 Update: mutt-1.5.21-5.fc14
2011-06-11 04:19:42
[SECURITY] Fedora 13 Update: mutt-1.5.21-5.fc13
2011-06-15 05:40:17
[SECURITY] Fedora 15 Update: mutt-1.5.21-5.fc15
2011-06-11 04:18:43
nessus
nessus
Fedora 14 : mutt-1.5.21-5.fc14 (2011-7751)
2011-06-12 00:00:00
FreeBSD : mutt-devel -- failure to check SMTP TLS server certificate (49314321-7fd4-11e1-9582-001b2134ef46)
2012-04-09 00:00:00
RHEL 6 : mutt (RHSA-2011:0959)
2011-07-20 00:00:00
securityvulns
securityvulns
[USN-1221-1] Mutt vulnerability
2011-10-01 00:00:00
mutt SSL certificate validation vulnerability
2011-10-01 00:00:00
openvas
openvas
Fedora Update for mutt FEDORA-2011-7756
2011-06-20 00:00:00
RedHat Update for mutt RHSA-2011:0959-01
2012-06-06 00:00:00
Fedora Update for mutt FEDORA-2011-7751
2011-06-20 00:00:00
redhat
redhat
(RHSA-2011:0959) Moderate: mutt security update
2011-07-19 00:00:00
oraclelinux
oraclelinux
mutt security update
2011-07-19 00:00:00
ubuntu
ubuntu
Mutt vulnerability
2011-09-29 00:00:00
cbl_mariner
cbl_mariner
CVE-2011-1429 affecting package mutt 2.2.12-1
2024-10-01 09:12:11
cvelist
cvelist
CVE-2011-1429
2011-03-16 22:00:00
prion
prion
Design/Logic Flaw
2011-03-16 22:55:00
debiancve
debiancve
CVE-2011-1429
2011-03-16 22:55:04
ubuntucve
ubuntucve
CVE-2011-1429
2011-03-16 00:00:00
cve
cve
CVE-2011-1429
2011-03-16 22:55:04
nvd
nvd
CVE-2011-1429
2011-03-16 22:55:04
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS
0.003
Percentile
66.2%
Related for 49314321-7FD4-11E1-9582-001B2134EF46