Summary
It was discovered that Mutt incorrectly handled certain requests.
An attacker could possibly use this issue to enable MITM attacks.
(CVE-2020-14093)
It was discovered that Mutt incorrectly handled certain requests.
An attacker could possibly use this issue to proceeds with a connection
even if the user rejects an expired intermediate certificate.
(CVE-2020-14154)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | mutt | 1.5.24-1ubuntu0.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | mutt | 1.9.4-3ubuntu0.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | mutt | 1.13.2-1ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
-
Unscored —
Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an …