CVE-2006-3242
Fixed in a distro release EPSS 6%
Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces received from the IMAP server.
Products: mutt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mutt | 1.5.11+cvs20060403-2 |
| Debian 13 | mutt | 1.5.11+cvs20060403-2 |
| Debian 14 | mutt | 1.5.11+cvs20060403-2 |
| Debian 3.1 | mutt | 1.5.9-2sarge2 |
| Red Hat Enterprise Linux 3 | mutt | 5:1.4.1-3.5.rhel3 |
| Red Hat Enterprise Linux 3 | mutt-debuginfo | 5:1.4.1-3.5.rhel3 |
| Red Hat Enterprise Linux 4 | mutt | 5:1.4.1-11.rhel4 |
| Red Hat Enterprise Linux 4 | mutt-debuginfo | 5:1.4.1-11.rhel4 |