CVE-2020-14093

Name
CVE-2020-14093
Description
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Vendor Advisory http://www.mutt.org
Patch https://github.com/muttmua/mutt/commit/3e88866dc60b5fa6aaba6fd7c1710c12c1c3cd01
DEBIAN https://www.debian.org/security/2020/dsa-4707
MISC https://bugs.gentoo.org/728300
DEBIAN https://www.debian.org/security/2020/dsa-4708
SUSE http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00064.html
SUSE http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00070.html
MLIST https://lists.debian.org/debian-lts-announce/2020/06/msg00040.html
MLIST https://lists.debian.org/debian-lts-announce/2020/06/msg00039.html
UBUNTU https://usn.ubuntu.com/4401-1/
GENTOO https://security.gentoo.org/glsa/202007-57

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:* mutt >= None < 1.14.3

Vulnerable and fixed packages

Source package Branch Version Maintainer Status