The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks.

The remote host is affected by the vulnerability described in GLSA-200506-02 (Mailutils: SQL Injection)

    When GNU Mailutils is built with the 'mysql' or 'postgres' USE     flag, the sql_escape_string function of the authentication module fails     to properly escape the '\\' character, rendering it vulnerable to a SQL     command injection.
  Impact :

    A malicious remote user could exploit this vulnerability to inject     SQL commands to the underlying database.
  Workaround :

    There is no known workaround at this time.

GNU Mailutils is a collection of mail utilities, including an IMAP4 daemon, a POP3 daemon, and a very simple mail client. 

The remote host is running a version of GNU Mailutils containing several critical flaws in its IMAP4 daemon and its mail client 'mail'. By exploiting these issues, a remote attacker can cause a denial of service in the IMAP4 daemon and execute code remotely, either in the context of a local user or the user executing the daemon process, typically root. 

In addition, it may suffer from a SQL injection flaw if configured to work with MySQL or Postgres.  An attacker may be able to exploit this flaw to modify database queries when mailutils tries to authenticate a user, leading to disclosure of sensitive information or modification of data.

The remote host is running GNU Mailutils, an open source package that includes tools for running and managing a mail server.  This version of GNU Mailutils is vulnerable to several remote buffer overflows.  An attacker exploiting these flaws will be able to execute arbitrary code.

ID	Name	Product	Family	Severity
18425	GLSA-200506-02 : Mailutils: SQL Injection	Nessus	Gentoo Local Security Checks	high
18371	GNU Mailutils <= 0.6 Multiple Vulnerabilities	Nessus	Gain a shell remotely	high
2938	GNU Mailutils Multiple IMAP Vulnerabilities	Nessus Network Monitor	POP Server	medium

Detections

Analytics

CVE-2005-1824

critical

Tenable Plugins

high

high

medium