Summary
Ein anonymer Angreifer kann mehrere Schwachstellen in mutt ausnutzen, um Daten zu manipulieren oder vertrauliche Informationen offenzulegen.
Product
Mutt ist ein textbasiertes E-Mail-Programm für Unix und andere Unix-artige Betriebssysteme.
Vulnerabilities 3
-
Medium 6.5
Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing
In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.
-
Medium 5.3
Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
-
Medium 5.3
Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block
In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info.
Revision history
-
#3
Neue Updates von Ubuntu aufgenommen
-
#2
Neue Updates von openSUSE aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Bugzilla vom 2024-11-14
https://bugzilla.redhat.com/show_bug.cgi?id=2325317
-
Red Hat Bugzilla vom 2024-11-14
https://bugzilla.redhat.com/show_bug.cgi?id=2325330
-
Red Hat Bugzilla vom 2024-11-14
https://bugzilla.redhat.com/show_bug.cgi?id=2325332
-
NIST Vulnerability Database vom 2024-11-14
https://nvd.nist.gov/vuln/detail/CVE-2024-49393
-
NIST Vulnerability Database vom 2024-11-14
https://nvd.nist.gov/vuln/detail/CVE-2024-49394
-
NIST Vulnerability Database vom 2024-11-14
https://nvd.nist.gov/vuln/detail/CVE-2024-49395
-
openSUSE Security Update OPENSUSE-SU-2024:14527-1 vom 2024-11-27
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZYFPGXOX4Q4I4UNPEGXP2N372IN2YSAS/
-
Ubuntu Security Notice USN-7204-1 vom 2025-01-15
https://ubuntu.com/security/notices/USN-7204-1