(PVS) Signatures - Tenable Network Security

Mutt < 1.4.1 / 1.5 Address Handling Buffer Overflow Vulnerability
PVS ID: 1297 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running a version of the Mutt email client that contains a buffer overflow in the email
address handling routines. Exploitation of this overflow by an attacker may allow arbitrary
code execution in the context of the Mutt user.
Solution: Upgrade to either 1.4.1 or 1.5. Patches/upgrades are available at www.mutt.org
CVE-2002-0001
Mutt < 1.4.1 / 1.5 IMAP Server Format String Vulnerability
PVS ID: 1298 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a 'format string' vulnerability\n\nThe remote
host is running a version of the Mutt email client that contains a format string vulnerability.
Due to improper handling of input from IMAP servers, it may be possible for a malicious
IMAP server to send a specially crafted message to the mutt client that will cause execution
of arbitrary code in the context of the mutt user.
Solution: Upgrade to either 1.4.1 or 1.5. Patches/upgrades are available at www.mutt.org
CVE Not available
Mutt < 1.4.1 / 1.5 Text Enriched Handler Buffer Overflow Vulnerability
PVS ID: 1299 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running a version of the Mutt email client that contains a buffer overflow in the handling
routines for the text enriched MIME type. This vulnerability may allow malicious email
messages to execute code in the context of the mutt user.
Solution: Upgrade to either 1.4.1 or 1.5. Patches/upgrades are available at www.mutt.org
CVE Not available
Elm Alternative Folder Buffer Overflow Vulnerability
PVS ID: 1300 FAMILY: SMTP Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running Elm 2.4 PL3 which contains a buffer overflow accessible by passing a long string
to the -f (Alternative-Folder) command-line option.
Family Internet Services 332