// For flags

CVE-2006-3242

 

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces received from the IMAP server.

Desbordamiento de búfer basado en pila en la función browse_get_namespace en imap/browse.c de Mutt v1.4.2.1 y anteriores permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código de su elección a través de un espacio de nombre largo recibido desde el servidor IMAP.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2006-06-26 CVE Reserved
  • 2006-06-27 CVE Published
  • 2023-06-08 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (32)
URL Tag Source
http://dev.mutt.org/cgi-bin/gitweb.cgi?p=mutt/.git%3Ba=commit%3Bh=dc0272b749f0e2b102973b7ac43dbd3908507540 X_refsource_confirm
http://dev.mutt.org/cgi-bin/viewcvs.cgi/mutt/imap/browse.c?r1=1.34.2.2&r2=1.34.2.3 X_refsource_confirm
http://secunia.com/advisories/20836 Third Party Advisory
http://secunia.com/advisories/20854 Third Party Advisory
http://secunia.com/advisories/20879 Third Party Advisory
http://secunia.com/advisories/20887 Third Party Advisory
http://secunia.com/advisories/20895 Third Party Advisory
http://secunia.com/advisories/20960 Third Party Advisory
http://secunia.com/advisories/21039 Third Party Advisory
http://secunia.com/advisories/21124 Third Party Advisory
http://secunia.com/advisories/21135 Third Party Advisory
http://secunia.com/advisories/21220 Third Party Advisory
http://securitytracker.com/id?1016482 Vdb Entry
http://www.securityfocus.com/archive/1/438712/100/0/threaded Mailing List
http://www.securityfocus.com/bid/18642 Vdb Entry
http://www.vupen.com/english/advisories/2006/2522 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/27428 Vdb Entry
https://issues.rpath.com/browse/RPL-471 X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10826 Signature
URL Date SRC
URL Date SRC
URL Date SRC
ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U 2023-11-07
http://secunia.com/advisories/20810 2023-11-07
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472221 2023-11-07
http://www.debian.org/security/2006/dsa-1108 2023-11-07
http://www.gentoo.org/security/en/glsa/glsa-200606-27.xml 2023-11-07
http://www.mandriva.com/security/advisories?name=MDKSA-2006:115 2023-11-07
http://www.novell.com/linux/security/advisories/2006_16_sr.html 2023-11-07
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.013-mutt.html 2023-11-07
http://www.redhat.com/support/errata/RHSA-2006-0577.html 2023-11-07
http://www.trustix.org/errata/2006/0038 2023-11-07
https://usn.ubuntu.com/307-1 2023-11-07
https://access.redhat.com/security/cve/CVE-2006-3242 2006-07-12
https://bugzilla.redhat.com/show_bug.cgi?id=1618137 2006-07-12
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Mutt
Search vendor "Mutt"
 Mutt
Search vendor "Mutt" for product "Mutt"
 1.4.2
Search vendor "Mutt" for product "Mutt" and version "1.4.2"
-
Affected
Mutt
Search vendor "Mutt"
 Mutt
Search vendor "Mutt" for product "Mutt"
 1.4.2.1
Search vendor "Mutt" for product "Mutt" and version "1.4.2.1"
-
Affected