Security Advisory (MDKSA-2003:041): mutt

[aru]

MandrakeSoft Security Advisory MDKSA-2003:041 : mutt

 

April 1st, 2003

Updated mutt packages fix exploitable buffer overflow

 

A vulnerability was discovered in the mutt text-mode email client in the IMAP code. This vulnerability can be exploited by a malicious IMAP server to crash mutt or even execute arbitrary code with the privilege of the user running mutt.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 8.2

 

[*] 8.2/PPC

 

[*] 9.0

 

[*] 9.1

 

[*] 9.1/PPC

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:041

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2003-0140

 

Posted automatically by aru (mdksec2mub v0.0.5)