Detections
Analytics

GLSA-202310-13 : GNU Mailutils: unexpected processsing of escape sequences

high Nessus Plugin ID 183385

Language:

Description

The remote host is affected by the vulnerability described in GLSA-202310-13 (GNU Mailutils: unexpected processsing of escape sequences)

 - fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command `mail` from mailutils package used in mail actions like `mail-whois` can execute command if unescaped sequences (`\n~`) are available in foreign input (for instance in whois output). To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent by the whois server, either via a MITM attack or by taking over a whois server. The issue is patched in versions 0.10.7 and 0.11.3. As a workaround, one may avoid the usage of action `mail-whois` or patch the vulnerability manually. (CVE-2021-32749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

All Mailutils users should upgrade to the latest version:

 # emerge --sync # emerge --ask --oneshot --verbose >=net-mail/mailutils-3.12-r3

See Also

https://security.gentoo.org/glsa/202310-13

https://bugs.gentoo.org/show_bug.cgi?id=802867

Plugin Details

Severity: High

ID: 183385

File Name: gentoo_GLSA-202310-13.nasl

Version: 1.0

Type: local

Published: 10/19/2023

Updated: 10/19/2023

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2021-32749

CVSS v3

Risk Factor: High

Base Score: 8.1

Temporal Score: 7.3

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:gentoo:linux:mailutils, cpe:/o:gentoo:linux

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/19/2023

Vulnerability Publication Date: 7/16/2021

Reference Information

CVE: CVE-2021-32749