p PatchFirst

CVE-2003-0167

CVE-2003-0167

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140.

EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • balsa Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.0.10

    Update to 2.0.10

  • balsa Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.0.10

    Update to 2.0.10

  • balsa Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.0.10

    Update to 2.0.10

  • mutt Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.4.0

    Update to 1.4.0

  • mutt Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.4.0

    Update to 1.4.0

  • mutt Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.4.0

    Update to 1.4.0

Original sources

Check your server →