CVE-2020-14093

Debian Bug report logs - #962897 mutt: CVE-2020-14093 Package: src:mutt; Maintainer for src:mutt is Mutt maintainers <mutt@packagesdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 15 Jun 2020 16:42:02 UTC Severity: important Tags: security, upstream Found in version mutt/1140-1 R ...

Several security issues were fixed in Mutt ...

Damian Poddebniak and Fabian Ising discovered two security issues in the STARTTLS handling of the Mutt mail client, which could enable MITM attacks For the oldstable distribution (stretch), these problems have been fixed in version 172-1+deb9u3 For the stable distribution (buster), these problems have been fixed in version 1101-21+deb10u2 W ...

Damian Poddebniak and Fabian Ising discovered two security issues in the STARTTLS handling of the Neomutt mail client, which could enable MITM attacks For the stable distribution (buster), these problems have been fixed in version 20180716+dfsg1-1+deb10u1 We recommend that you upgrade your neomutt packages For the detailed security status of ne ...

Mutt before 1143 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response (CVE-2020-14093) Mutt before 1143 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate (CVE-2020-14154) Mutt before 1144 and NeoMutt before 2020-06-19 have a STARTTLS bu ...