Detections
Analytics
GNU Mailutils <= 0.6 Multiple Vulnerabilities
high Nessus Plugin ID 18371
Language:
Synopsis
The remote mail server is affected by multiple issues.Description
GNU Mailutils is a collection of mail utilities, including an IMAP4 daemon, a POP3 daemon, and a very simple mail client.The remote host is running a version of GNU Mailutils containing several critical flaws in its IMAP4 daemon and its mail client 'mail'. By exploiting these issues, a remote attacker can cause a denial of service in the IMAP4 daemon and execute code remotely, either in the context of a local user or the user executing the daemon process, typically root.
In addition, it may suffer from a SQL injection flaw if configured to work with MySQL or Postgres. An attacker may be able to exploit this flaw to modify database queries when mailutils tries to authenticate a user, leading to disclosure of sensitive information or modification of data.
Solution
Upgrade to GNU Mailutils 0.6.90 or later.See Also
Plugin Details
Severity: High
ID: 18371
File Name: gnu_mailutils_060.nasl
Version: 1.27
Type: remote
Family: Gain a shell remotely
Published: 5/26/2005
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.5
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:gnu:mailutils
Required KB Items: imap/login, imap/password, pop3/login, pop3/password
Excluded KB Items: global_settings/supplied_logins_only, imap/false_imap
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/27/2005
Vulnerability Publication Date: 5/15/2005
Reference Information
CVE: CVE-2005-1520, CVE-2005-1521, CVE-2005-1522, CVE-2005-1523, CVE-2005-1824