Directory Traversal Vulnerability in Mutt and NeoMutt Email Clients
CVE-2018-14355

5.3MEDIUM

Key Information:

Vendor

Debian
Status
Debian Linux
Vendor
CVE Published:
17 July 2018

What is CVE-2018-14355?

A directory traversal vulnerability exists in Mutt and NeoMutt email clients that can potentially allow an attacker to manipulate mailbox names using '..' sequences in paths. This flaw can lead to unauthorized access to sensitive information within a user's mailbox. Users are advised to update their email clients to secure versions to mitigate the risks associated with this vulnerability.

References

https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df828...
x_refsource_MISC
https://usn.ubuntu.com/3719-3/
vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4277
vendor-advisoryx_refsource_DEBIAN

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.