• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Mutt IMAP Remote Folder Buffer Overflow Vulnerabilities

Solution:
Debian has released security advisories (DSA 274-1 and DSA 274-2) which contain fixes, addressing this issue for Debian releases 2.2 and 3.0. Users are advised to upgrade as soon as possible.

Fixes:


GNOME Balsa 1.2.4

• Debian balsa_1.2.4-2.2_alpha.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_a lpha.deb


• Debian balsa_1.2.4-2.2_arm.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_a rm.deb


• Debian balsa_1.2.4-2.2_hppa.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_h ppa.deb


• Debian balsa_1.2.4-2.2_i386.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_i 386.deb


• Debian balsa_1.2.4-2.2_ia64.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_i a64.deb


• Debian balsa_1.2.4-2.2_m68k.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_m 68k.deb


• Debian balsa_1.2.4-2.2_mips.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_m ips.deb


• Debian balsa_1.2.4-2.2_mipsel.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_m ipsel.deb


• Debian balsa_1.2.4-2.2_powerpc.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_p owerpc.deb


• Debian balsa_1.2.4-2.2_s390.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_s 390.deb


• Debian balsa_1.2.4-2.2_sparc.deb
  http://security.debian.org/pool/updates/main/b/balsa/balsa_1.2.4-2.2_s parc.deb

Mutt Mutt 1.2.5

• Debian mutt_1.2.5-5.2_alpha.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.2.5-5.2_alp ha.deb


• Debian mutt_1.2.5-5.2_arm.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.2.5-5.2_arm .deb


• Debian mutt_1.2.5-5.2_i386.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.2.5-5.2_i38 6.deb


• Debian mutt_1.2.5-5.2_m68k.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.2.5-5.2_m68 k.deb


• Debian mutt_1.2.5-5.2_powerpc.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.2.5-5.2_pow erpc.deb


• Debian mutt_1.2.5-5.2_sparc.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.2.5-5.2_spa rc.deb

Mutt Mutt 1.3.28

• Debian mutt-utf8_1.3.28-2.2_alpha.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_alpha.deb


• Debian mutt-utf8_1.3.28-2.2_arm.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_arm.deb


• Debian mutt-utf8_1.3.28-2.2_hppa.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_hppa.deb


• Debian mutt-utf8_1.3.28-2.2_i386.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_i386.deb


• Debian mutt-utf8_1.3.28-2.2_ia64.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_ia64.deb


• Debian mutt-utf8_1.3.28-2.2_m68k.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_m68k.deb


• Debian mutt-utf8_1.3.28-2.2_mips.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_mips.deb


• Debian mutt-utf8_1.3.28-2.2_mipsel.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_mipsel.deb


• Debian mutt-utf8_1.3.28-2.2_powerpc.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_powerpc.deb


• Debian mutt-utf8_1.3.28-2.2_s390.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_s390.deb


• Debian mutt-utf8_1.3.28-2.2_sparc.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt-utf8_1.3.28-2 .2_sparc.deb


• Debian mutt_1.3.28-2.2_alpha.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_al pha.deb


• Debian mutt_1.3.28-2.2_arm.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_ar m.deb


• Debian mutt_1.3.28-2.2_hppa.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_hp pa.deb


• Debian mutt_1.3.28-2.2_i386.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_i3 86.deb


• Debian mutt_1.3.28-2.2_ia64.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_ia 64.deb


• Debian mutt_1.3.28-2.2_m68k.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_m6 8k.deb


• Debian mutt_1.3.28-2.2_mips.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_mi ps.deb


• Debian mutt_1.3.28-2.2_mipsel.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_mi psel.deb


• Debian mutt_1.3.28-2.2_powerpc.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_po werpc.deb


• Debian mutt_1.3.28-2.2_s390.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_s3 90.deb


• Debian mutt_1.3.28-2.2_sparc.deb
  http://security.debian.org/pool/updates/main/m/mutt/mutt_1.3.28-2.2_sp arc.deb