5.8
CVSSv2

CVE-2011-1429

Published: 16/03/2011 Updated: 17/08/2017
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle malicious users to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mutt mutt

Vendor Advisories

An attacker could trick mutt into trusting a rogue server ...