Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion.

A flaw was discovered in mutt, a text-based mailreader. A specially crafted mail header could cause mutt to crash, leading to a denial of service condition.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The mailreader mutt was updated to fix a crash in header view that could be triggered by malformed e-mails and potentially be used to execute code.

The remote host is affected by the vulnerability described in GLSA-201406-05 (Mutt: Arbitrary code execution)

    A heap-based buffer overflow has been discovered in the mutt_copy_hdr       function.
  Impact :

    A remote attacker could send a specially crafted message, possibly       resulting in execution of arbitrary code with the privileges of the user       running Mutt or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

fix build on s390 fix: CVE-2014-0467 heap-based buffer overflow when parsing certain headers

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

fix: CVE-2014-0467 heap-based buffer overflow when parsing certain headers

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The mailreader mutt was updated to fix a security issue in displaying mail headers, where a crafted e-mail could cause a heap overflow, which in turn might be used by attackers to crash mutt or potentially even execute code.

A heap-based buffer overflow flaw was found in the way mutt processed certain email headers. A remote attacker could use this flaw to send an email with specially crafted headers that, when processed, could cause mutt to crash or, potentially, execute arbitrary code with the permissions of the user running mutt. (CVE-2014-0467)

A heap-based buffer overflow flaw was found in the way mutt processed certain email headers. A remote attacker could use this flaw to send an email with specially crafted headers that, when processed, could cause mutt to crash or, potentially, execute arbitrary code with the permissions of the user running mutt. (CVE-2014-0467)

All running instances of mutt must be restarted for this update to take effect.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:0304 advisory.

    Mutt is a text-mode mail user agent.

    A heap-based buffer overflow flaw was found in the way mutt processed     certain email headers. A remote attacker could use this flaw to send an     email with specially crafted headers that, when processed, could cause mutt     to crash or, potentially, execute arbitrary code with the permissions of     the user running mutt. (CVE-2014-0467)

    All mutt users are advised to upgrade to this updated package, which     contains a backported patch to correct this issue. All running instances of     mutt must be restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

From Red Hat Security Advisory 2014:0304 :

An updated mutt package that fixes one security issue is now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Mutt is a text-mode mail user agent.

A heap-based buffer overflow flaw was found in the way mutt processed certain email headers. A remote attacker could use this flaw to send an email with specially crafted headers that, when processed, could cause mutt to crash or, potentially, execute arbitrary code with the permissions of the user running mutt. (CVE-2014-0467)

All mutt users are advised to upgrade to this updated package, which contains a backported patch to correct this issue. All running instances of mutt must be restarted for this update to take effect.

An updated mutt package that fixes one security issue is now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Mutt is a text-mode mail user agent.

A heap-based buffer overflow flaw was found in the way mutt processed certain email headers. A remote attacker could use this flaw to send an email with specially crafted headers that, when processed, could cause mutt to crash or, potentially, execute arbitrary code with the permissions of the user running mutt. (CVE-2014-0467)

All mutt users are advised to upgrade to this updated package, which contains a backported patch to correct this issue. All running instances of mutt must be restarted for this update to take effect.

Beatrice Torracca and Evgeni Golov report :

A buffer overflow has been discovered that could result in denial of service or potential execution of arbitrary code.

This condition can be triggered by malformed RFC2047 header lines

Beatrice Torracca and Evgeni Golov discovered a buffer overflow in mutt while expanding addresses when parsing email headers. An attacker could specially craft an email to cause mutt to crash, resulting in a denial of service, or possibly execute arbitrary code with the privileges of the user invoking mutt.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Beatrice Torracca and Evgeni Golov discovered a buffer overflow in the mutt mailreader. Malformed RFC2047 header lines could result in denial of service or potentially the execution of arbitrary code.

New mutt packages are available for Slackware 13.37, 14.0, 14.1, and
-current to fix a security issue.

ID	Name	Product	Family	Severity
82084	Debian DLA-100-1 : mutt security update	Nessus	Debian Local Security Checks	medium
75304	openSUSE Security Update : mutt (openSUSE-SU-2014:0434-1)	Nessus	SuSE Local Security Checks	medium
74320	GLSA-201406-05 : Mutt: Arbitrary code execution	Nessus	Gentoo Local Security Checks	medium
74174	Fedora 19 : mutt-1.5.23-2.fc19 (2014-6395)	Nessus	Fedora Local Security Checks	medium
74050	Fedora 20 : mutt-1.5.23-2.fc20 (2014-6408)	Nessus	Fedora Local Security Checks	medium
73898	Fedora 20 : mutt-1.5.23-1.fc20 (2014-5880)	Nessus	Fedora Local Security Checks	medium
73297	SuSE 11.3 Security Update : mutt (SAT Patch Number 9023)	Nessus	SuSE Local Security Checks	medium
73229	Amazon Linux AMI : mutt (ALAS-2014-310)	Nessus	Amazon Linux Local Security Checks	medium
73073	Scientific Linux Security Update : mutt on SL6.x i386/x86_64 (20140317)	Nessus	Scientific Linux Local Security Checks	medium
73071	RHEL 6 : mutt (RHSA-2014:0304)	Nessus	Red Hat Local Security Checks	critical
73069	Oracle Linux 6 : mutt (ELSA-2014-0304)	Nessus	Oracle Linux Local Security Checks	medium
73062	CentOS 6 : mutt (CESA-2014:0304)	Nessus	CentOS Local Security Checks	medium
73050	FreeBSD : mutt -- denial of service, potential remote code execution (eb426e82-ab68-11e3-9d09-000c2980a9f3)	Nessus	FreeBSD Local Security Checks	medium
73017	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : mutt vulnerability (USN-2147-1)	Nessus	Ubuntu Local Security Checks	medium
72989	Debian DSA-2874-1 : mutt - security update	Nessus	Debian Local Security Checks	medium
72967	Slackware 13.37 / 14.0 / 14.1 / current : mutt (SSA:2014-071-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2014-0467

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

medium

medium