p PatchFirst

CVE-2011-1429

CVE-2011-1429

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766.

EPSS 1.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • mutt Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.5.21-5

    Update to 1.5.21-5

  • mutt Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.5.21-5

    Update to 1.5.21-5

  • mutt Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.5.21-5

    Update to 1.5.21-5

Original sources

Check your server →