Mutt GnuPG Arbitrary Content Injection Vulnerability
BID:22778
Info
Mutt GnuPG Arbitrary Content Injection Vulnerability
| Bugtraq ID: | 22778 |
| Class: | Design Error |
| CVE: |
CVE-2007-1268 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 05 2007 12:00AM |
| Updated: | Mar 06 2007 06:45PM |
| Credit: | This vulnerability was found by Gerardo Richarte from Core Security Technologies. |
| Vulnerable: |
Mutt Mutt 1.5.13 Mutt Mutt 1.5.12 Mutt Mutt 1.5.11 Mutt Mutt 1.5.10 Mutt Mutt 1.5.9 Mutt Mutt 1.5.6 Mutt Mutt 1.5.4 Mutt Mutt 1.5.3 Mutt Mutt 1.4.2 Mutt Mutt 1.4.1 Mutt Mutt 1.4 .0 Mutt Mutt 1.3.28 Mutt Mutt 1.3.27 Mutt Mutt 1.3.25 Mutt Mutt 1.3.24 Mutt Mutt 1.3.22 Mutt Mutt 1.3.17 Mutt Mutt 1.3.16 Mutt Mutt 1.3.12 -1 Mutt Mutt 1.3.12 Mutt Mutt 1.2.5 .1 Mutt Mutt 1.2.5 -5 Mutt Mutt 1.2.5 -4 Mutt Mutt 1.2.5 -12OL Mutt Mutt 1.2.5 -12 Mutt Mutt 1.2.5 -1 Mutt Mutt 1.2.5 Mutt Mutt 1.2 -1 Mutt Mutt 1.1.12 -1 Mutt Mutt 1.1.9 -1 Mutt Mutt 1.1.5 -1 Mutt Mutt 1.1.4 -1 Mutt Mutt 1.1.3 -1 Mutt Mutt 1.1.2 -2 Mutt Mutt 1.1.2 -1 Mutt Mutt 1.1.1 -1 Mutt Mutt 1.0.1 Mutt Mutt 1.0 pre3 Mutt Mutt 0.95.6 Mutt Mutt 0.93.2 (i) Mutt Mutt 0.93.2 Mutt Mutt 0.93.1 (i) Mutt Mutt 1.5.9i Mutt Mutt 1.5.5i Mutt Mutt 1.5.5.1i Mutt Mutt 1.4.2.2 Mutt Mutt 1.4.2.1 MIT Kerberos 5 0.93.1 (i) |
| Not Vulnerable: | |
Discussion
Mutt GnuPG Arbitrary Content Injection Vulnerability
Mutt is prone to a vulnerability that may allow an attacker to add arbitrary content into a message without the end user knowing.
An attacker may be able to exploit this issue to add arbitrary content into a GnuPG signed and/or encrypted message.
This vulnerability is due to the weakness discussed in BID 22757 (GnuPG Signed Message Arbitrary Content Injection Weakness) and has been assigned its own BID because of the specific way that Mutt uses GnuPG.
This issue affects Mutt versions prior to and including 1.5.13.
Mutt is prone to a vulnerability that may allow an attacker to add arbitrary content into a message without the end user knowing.
An attacker may be able to exploit this issue to add arbitrary content into a GnuPG signed and/or encrypted message.
This vulnerability is due to the weakness discussed in BID 22757 (GnuPG Signed Message Arbitrary Content Injection Weakness) and has been assigned its own BID because of the specific way that Mutt uses GnuPG.
This issue affects Mutt versions prior to and including 1.5.13.
Exploit / POC
Mutt GnuPG Arbitrary Content Injection Vulnerability
The reporter of this issue has supplied multiple proof-of-concept examples demonstrating this issue. Please see the attached advisory for further information.
The reporter of this issue has supplied multiple proof-of-concept examples demonstrating this issue. Please see the attached advisory for further information.
Solution / Fix
Mutt GnuPG Arbitrary Content Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
Mutt GnuPG Arbitrary Content Injection Vulnerability
References:
References:
- GnuPG Homepage (GnuPG)
- Impacket library (Core Security)
- Mutt Homepage (Mutt)
- CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability (CORE Security Technologies Advisories