Mutt SMTP TLS Certificate Security Bypass Vulnerability
BID:46803
Info
Mutt SMTP TLS Certificate Security Bypass Vulnerability
| Bugtraq ID: | 46803 |
| Class: | Design Error |
| CVE: |
CVE-2011-1429 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 09 2011 12:00AM |
| Updated: | Apr 13 2015 09:53PM |
| Credit: | dave b |
| Vulnerable: |
Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop 6 Mutt Mutt 1.5.20 Mutt Mutt 1.5.19 Mutt Mutt 1.5.13 Mutt Mutt 1.5.12 Mutt Mutt 1.5.11 Mutt Mutt 1.5.10 Mutt Mutt 1.5.9 Mutt Mutt 1.5.6 Mutt Mutt 1.5.4 Mutt Mutt 1.5.3 Mutt Mutt 1.5.9i Mutt Mutt 1.5.5i Mutt Mutt 1.5.5.1i Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 |
| Not Vulnerable: | |
Discussion
Mutt SMTP TLS Certificate Security Bypass Vulnerability
Mutt is prone to a security-bypass vulnerability because the application fails to properly validate STMP TLS Certificates.
Successful exploits allow attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Mutt is prone to a security-bypass vulnerability because the application fails to properly validate STMP TLS Certificates.
Successful exploits allow attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Exploit / POC
Mutt SMTP TLS Certificate Security Bypass Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
Mutt SMTP TLS Certificate Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
Mandriva Linux Mandrake 2010.1
Mandriva Linux Mandrake 2011 x86_64
Mandriva Linux Mandrake 2011
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1 x86_64
-
Mandriva mutt-1.5.20-8.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mutt-doc-1.5.20-8.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mutt-utf8-1.5.20-8.1mdv2010.2.x86_64.rpm
http://www.mandriva.com/en/downloads/
Mandriva Linux Mandrake 2010.1
-
Mandriva mutt-1.5.20-8.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mutt-doc-1.5.20-8.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mutt-utf8-1.5.20-8.1mdv2010.2.i586.rpm
http://www.mandriva.com/en/downloads/
Mandriva Linux Mandrake 2011 x86_64
-
Mandriva mutt-1.5.21-4.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mutt-doc-1.5.21-4.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mutt-utf8-1.5.21-4.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/
Mandriva Linux Mandrake 2011
-
Mandriva mutt-1.5.21-4.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mutt-doc-1.5.21-4.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva mutt-utf8-1.5.21-4.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/
References
Mutt SMTP TLS Certificate Security Bypass Vulnerability
References:
References: