low3.5Public exploit code
CVE-2007-2683
Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mutt 1.4.2 - Mutt_Gecos_Name Function Local Buffer Overflow2007-05-28 · local · linux · Verified
Impact
Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mutt | Mutt | Version 1.4.2 |
References
- NVD record
- CVE.org record
- http://dev.mutt.org/trac/ticket/2885
- http://osvdb.org/34973
- http://secunia.com/advisories/25408
- http://secunia.com/advisories/25515
- http://secunia.com/advisories/25529
- http://secunia.com/advisories/25546
- http://secunia.com/advisories/26415
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:113
- http://www.redhat.com/support/errata/RHSA-2007-0386.html
- http://www.securityfocus.com/bid/24192
- http://www.securitytracker.com/id?1018066
- http://www.trustix.org/errata/2007/0024/
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=239890
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34441
- https://issues.rpath.com/browse/RPL-1391
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10543
- http://dev.mutt.org/trac/ticket/2885
- http://osvdb.org/34973
- http://secunia.com/advisories/25408
- http://secunia.com/advisories/25515
- http://secunia.com/advisories/25529
- http://secunia.com/advisories/25546
- http://secunia.com/advisories/26415
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:113
- http://www.redhat.com/support/errata/RHSA-2007-0386.html