• info
• discussion
• exploit
• solution
• references

Mutt Insecure Temporary File Creation Multiple Vulnerabilities

Solution:
Please see the referenced advisories for more information.


Mutt Mutt 1.5.5.1i

• Mandriva mutt-1.5.5.1i-2.2.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva mutt-1.5.5.1i-2.2.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva mutt-utf8-1.5.5.1i-2.2.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva mutt-utf8-1.5.5.1i-2.2.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download

Mutt Mutt 1.4.2.2

• RedHat Fedora mutt-1.4.2.2-3.fc6.i386.rpm
  Fedora Core 6
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/


• RedHat Fedora mutt-1.4.2.2-3.fc6.ppc.rpm
  Fedora Core 6
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/


• RedHat Fedora mutt-1.4.2.2-3.fc6.x86_64.rpm
  Fedora Core 6
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/


• RedHat Fedora mutt-debuginfo-1.4.2.2-3.fc6.i386.rpm
  Fedora Core 6
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/


• RedHat Fedora mutt-debuginfo-1.4.2.2-3.fc6.ppc.rpm
  Fedora Core 6
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/


• RedHat Fedora mutt-debuginfo-1.4.2.2-3.fc6.x86_64.rpm
  Fedora Core 6
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

Mutt Mutt 1.5.11

• Ubuntu mutt_1.5.11-3ubuntu2.2_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.11-3ubuntu 2.2_amd64.deb


• Ubuntu mutt_1.5.11-3ubuntu2.2_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.11-3ubuntu 2.2_i386.deb


• Ubuntu mutt_1.5.11-3ubuntu2.2_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.11-3ubuntu 2.2_powerpc.deb


• Ubuntu mutt_1.5.11-3ubuntu2.2_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.11-3ubuntu 2.2_sparc.deb


• Ubuntu mutt_1.5.12-1ubuntu1.1_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.12-1ubuntu 1.1_amd64.deb

Mutt Mutt 1.5.12

• Ubuntu mutt_1.5.12-1ubuntu1.1_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.12-1ubuntu 1.1_i386.deb


• Ubuntu mutt_1.5.12-1ubuntu1.1_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.12-1ubuntu 1.1_powerpc.deb


• Ubuntu mutt_1.5.12-1ubuntu1.1_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.12-1ubuntu 1.1_sparc.deb

Mutt Mutt 1.5.9

• Ubuntu mutt_1.5.9-2ubuntu1.2_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.9-2ubuntu1 .2_amd64.deb


• Ubuntu mutt_1.5.9-2ubuntu1.2_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.9-2ubuntu1 .2_i386.deb


• Ubuntu mutt_1.5.9-2ubuntu1.2_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.9-2ubuntu1 .2_powerpc.deb


• Ubuntu mutt_1.5.9-2ubuntu1.2_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mutt/mutt_1.5.9-2ubuntu1 .2_sparc.deb

Trustix Secure Linux 2.2

• Trustix ldapclients-common-183-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix mutt-1.4.2.1-6tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix pam_ldap-183-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-cli-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-curl-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-devel-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-exif-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-fcgi-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-gd-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-imap-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-ldap-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mcrypt-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mhash-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysql-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-openssl-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pdo-mysql-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pdo-sqlite-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pgsql-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-sqlite-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-zlib-5.2.0-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates

Trustix Secure Linux 3.0

• Trustix ldapclients-common-183-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix mutt-1.4.2.1-10tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix pam_ldap-183-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-calendar-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-cli-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-curl-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-dba-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-devel-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-exif-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-fcgi-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-gd-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-imap-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-ldap-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mcrypt-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mhash-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysql-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysqli-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-openssl-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pdo-mysql-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pdo-sqlite-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pgsql-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pspell-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-snmp-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-sqlite-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-xslt-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-zlib-5.2.0-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates