The remote host is affected by the vulnerability described in GLSA-200505-20 (Mailutils: Multiple vulnerabilities in imap4d and mail)

    infamous41d discovered several vulnerabilities in GNU Mailutils.
    imap4d does not correctly implement formatted printing of command tags     (CAN-2005-1523), fails to validate the range sequence of the 'FETCH'     command (CAN-2005-1522), and contains an integer overflow in the     'fetch_io' routine (CAN-2005-1521). mail contains a buffer overflow in     'header_get_field_name()' (CAN-2005-1520).
  Impact :

    A remote attacker can exploit the format string and integer     overflow in imap4d to execute arbitrary code as the imap4d user, which     is usually root. By sending a specially crafted email message, a remote     attacker could exploit the buffer overflow in the 'mail' utility to     execute arbitrary code with the rights of the user running mail.
    Finally, a remote attacker can also trigger a Denial of Service by     sending a malicious FETCH command to an affected imap4d, causing     excessive resource consumption.
  Workaround :

    There are no known workarounds at this time.

GNU Mailutilsは、IMAP4デーモン、POP3デーモン、非常にシンプルなメールクライアントを含む、メールユーティリティのコレクションです。 

リモートホストは、IMAP4デーモンとメールクライアント「mail」でいくつかの重大な欠陥を含むGNU Mailutilsのバージョンを実行しています。これらの問題を悪用することで、リモートの攻撃者はIMAP4デーモンでサービス拒否を引き起こし、ローカルユーザーまたはデーモンプロセスを実行しているユーザー（通常はroot）のコンテキストで、コードをリモートで実行する可能性があります。 

さらに、MySQLまたはPostgresで動作するように構成されている場合、SQLインジェクションの欠陥の被害を受ける可能性があります。攻撃者がこの欠陥を悪用して、mailutilsがユーザーを認証しようとする際にデータベースクエリを変更し、機密情報の漏洩やデータの変更を引き起こす可能性があります。

GNU Mailutils 是一組郵件公用程式，包括一個 IMAP4 程序、一個 POP3 程序和一個非常簡單的郵件用戶端。 

遠端主機正在執行的 GNU Mailutils 版本在其 IMAP4 程序及其郵件用戶端「mail」中有數個重大瑕疵。遠端攻擊者可利用這些問題，在 IMAP4 程序中造成拒絕服務，並在本機使用者或執行程序處理程序的使用者 (通常是 root) 內容中從遠端執行程式碼。 

此外，如果設定為搭配 MySQL 或 Postgres 使用，還可能受到一個 SQL 插入瑕疵影響。攻擊者或可利用此缺陷，在 mailutils 嘗試驗證使用者時修改資料庫查詢，進而導致敏感資訊洩漏或資料修改。

GNU Mailutils 是一个邮件实用工具集合，包括一个 IMAP4 后台程序、一个 POP3 后台程序和一个非常简单的邮件客户端。 

远程主机正在运行的 GNU Mailutils 版本的 IMAP4 后台程序及其邮件客户端“mail”中包含数个严重缺陷。通过利用这些问题，远程攻击者可在本地用户环境或执行后台程序进程的用户（通常为根用户）环境中造成 IMAP4 后台程序拒绝服务并远程执行代码。 

此外，如果配置为与 MySQL 或 Postgres 配合使用，则该版本可能受到 SQL 注入缺陷的影响。当 mailutils 尝试对用户进行身份验证时，攻击者可利用此缺陷修改数据库查询，从而导致敏感信息泄露或数据修改。

'infamous41md' discovered several vulnerabilities in the GNU mailutils package which contains utilities for handling mail. These problems can lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities.

  - CAN-2005-1520     Buffer overflow mail header handling may allow a remote     attacker to execute commands with the privileges of the     targeted user.

  - CAN-2005-1521

    Combined integer and heap overflow in the fetch routine     can lead to the execution of arbitrary code.

  - CAN-2005-1522

    Denial of service in the fetch routine.

  - CAN-2005-1523

    Format string vulnerability can lead to the execution of     arbitrary code.

GNU Mailutils is a collection of mail utilities, including an IMAP4 daemon, a POP3 daemon, and a very simple mail client. 

The remote host is running a version of GNU Mailutils containing several critical flaws in its IMAP4 daemon and its mail client 'mail'. By exploiting these issues, a remote attacker can cause a denial of service in the IMAP4 daemon and execute code remotely, either in the context of a local user or the user executing the daemon process, typically root. 

In addition, it may suffer from a SQL injection flaw if configured to work with MySQL or Postgres.  An attacker may be able to exploit this flaw to modify database queries when mailutils tries to authenticate a user, leading to disclosure of sensitive information or modification of data.

The remote host is running GNU Mailutils, an open source package that includes tools for running and managing a mail server.  This version of GNU Mailutils is vulnerable to several remote buffer overflows.  An attacker exploiting these flaws will be able to execute arbitrary code.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
18384	GLSA-200505-20 : Mailutils: Multiple vulnerabilities in imap4d and mail	Nessus	Gentoo Local Security Checks	2005/5/28	2021/1/6	high
18371	GNU Mailutils <= 0.6複数の脆弱性	Nessus	Gain a shell remotely	2005/5/26	2022/4/11	high
18371	GNU Mailutils <= 0.6 多個弱點	Nessus	Gain a shell remotely	2005/5/26	2022/4/11	high
18371	GNU Mailutils <= 0.6 多个漏洞	Nessus	Gain a shell remotely	2005/5/26	2022/4/11	high
18519	Debian DSA-732-1 : mailutils - several vulnerabilities	Nessus	Debian Local Security Checks	2005/6/17	2021/1/4	high
18371	GNU Mailutils <= 0.6 Multiple Vulnerabilities	Nessus	Gain a shell remotely	2005/5/26	2022/4/11	high
2938	GNU Mailutils Multiple IMAP Vulnerabilities	Nessus Network Monitor	POP Server	2005/5/25	2019/3/6	medium

検出

プラグインの検索

high

high

high

high

high

high

medium