Description
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
References
- HPSBTL0201-011 vendor-advisory
- DSA-096 vendor-advisory
- http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html
- CLA-2002:449 vendor-advisory
- mutt-address-handling-bo(7759) vdb-entry
- 3774 vdb-entry
- SuSE-SA:2002:001 vendor-advisory
- 20020101 [Announce] SECURITY: mutt-1.2.5.1 and mutt-1.3.25 released. mailing-list
- RHSA-2002:003 vendor-advisory