Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0357
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0357)
Zusammenfassung:	The remote host is missing an update for the 'mutt' package(s) announced via the MGASA-2020-0357 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'mutt' package(s) announced via the MGASA-2020-0357 advisory. Vulnerability Insight: A potential IMAP Man-in-the-Middle attack via a PREAUTH response (CVE-2020-14093). Mutt was ignoring an expired certificate and was proceeding with a connection (CVE-2020-14154). A response injection due to a STARTTLS buffering issue which was affecting IMAP, SMTP, and POP3 (CVE-2020-14954). Affected Software/OS: 'mutt' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-14093 Debian Security Information: DSA-4707 (Google Search) https://www.debian.org/security/2020/dsa-4707 Debian Security Information: DSA-4708 (Google Search) https://www.debian.org/security/2020/dsa-4708 https://security.gentoo.org/glsa/202007-57 http://www.mutt.org https://bugs.gentoo.org/728300 https://github.com/muttmua/mutt/commit/3e88866dc60b5fa6aaba6fd7c1710c12c1c3cd01 https://lists.debian.org/debian-lts-announce/2020/06/msg00039.html https://lists.debian.org/debian-lts-announce/2020/06/msg00040.html SuSE Security Announcement: openSUSE-SU-2020:0903 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00064.html SuSE Security Announcement: openSUSE-SU-2020:0915 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00070.html https://usn.ubuntu.com/4401-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-14954 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3LXFVPTLK4PNHL6MPKJNJQJ25CH7GLQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFMEILCBKMZRRZDMUGWLVN4PQQ4VTAZE/ http://lists.mutt.org/pipermail/mutt-announce/Week-of-Mon-20200615/000023.html http://www.mutt.org/ https://github.com/neomutt/neomutt/commit/fb013ec666759cb8a9e294347c7b4c1f597639cc https://github.com/neomutt/neomutt/releases/tag/20200619 https://gitlab.com/muttmua/mutt/-/commit/c547433cdf2e79191b15c6932c57f1472bfb5ff4 https://gitlab.com/muttmua/mutt/-/issues/248 https://usn.ubuntu.com/4403-1/
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.