Vulnerability-Lookup

CVE-2004-0078 (GCVE-0-2004-0078)

Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2024-08-08 00:01

Summary

Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

14 references

URL	Tags
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://bugs.debian.org/126336	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=107696262905039&w=2	mailing-listx_refsource_BUGTRAQ
http://www.redhat.com/support/errata/RHSA-2004-051.html	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/9641	vdb-entryx_refsource_BID
http://marc.info/?l=bugtraq&m=107651677817933&w=2	mailing-listx_refsource_BUGTRAQ
http://www.redhat.com/support/errata/RHSA-2004-050.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=107884956930903&w=2	mailing-listx_refsource_BUGTRAQ
http://www.osvdb.org/3918	vdb-entryx_refsource_OSVDB
http://www.mandrakesoft.com/security/advisories?n…	vendor-advisoryx_refsource_MANDRAKE
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA…	vendor-advisoryx_refsource_CALDERA

Date Public

2004-02-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:01:23.755Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSA:2004-043",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/126336"
          },
          {
            "name": "20040215 LNSA-#2004-0001: mutt remote crash",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
          },
          {
            "name": "RHSA-2004:051",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
          },
          {
            "name": "oval:org.mitre.oval:def:811",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
          },
          {
            "name": "mutt-index-menu-bo(15134)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
          },
          {
            "name": "oval:org.mitre.oval:def:838",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
          },
          {
            "name": "9641",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/9641"
          },
          {
            "name": "20040211 Mutt-1.4.2 fixes buffer overflow.",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
          },
          {
            "name": "RHSA-2004:050",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
          },
          {
            "name": "20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
          },
          {
            "name": "3918",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/3918"
          },
          {
            "name": "MDKSA-2004:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
          },
          {
            "name": "CSSA-2004-013.0",
            "tags": [
              "vendor-advisory",
              "x_refsource_CALDERA",
              "x_transferred"
            ],
            "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-02-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-07-17T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSA:2004-043",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/126336"
        },
        {
          "name": "20040215 LNSA-#2004-0001: mutt remote crash",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
        },
        {
          "name": "RHSA-2004:051",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
        },
        {
          "name": "oval:org.mitre.oval:def:811",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
        },
        {
          "name": "mutt-index-menu-bo(15134)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
        },
        {
          "name": "oval:org.mitre.oval:def:838",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
        },
        {
          "name": "9641",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/9641"
        },
        {
          "name": "20040211 Mutt-1.4.2 fixes buffer overflow.",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
        },
        {
          "name": "RHSA-2004:050",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
        },
        {
          "name": "20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
        },
        {
          "name": "3918",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/3918"
        },
        {
          "name": "MDKSA-2004:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
        },
        {
          "name": "CSSA-2004-013.0",
          "tags": [
            "vendor-advisory",
            "x_refsource_CALDERA"
          ],
          "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0078",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSA:2004-043",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
            },
            {
              "name": "http://bugs.debian.org/126336",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/126336"
            },
            {
              "name": "20040215 LNSA-#2004-0001: mutt remote crash",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
            },
            {
              "name": "RHSA-2004:051",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
            },
            {
              "name": "oval:org.mitre.oval:def:811",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
            },
            {
              "name": "mutt-index-menu-bo(15134)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
            },
            {
              "name": "oval:org.mitre.oval:def:838",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
            },
            {
              "name": "9641",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/9641"
            },
            {
              "name": "20040211 Mutt-1.4.2 fixes buffer overflow.",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
            },
            {
              "name": "RHSA-2004:050",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
            },
            {
              "name": "20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt)",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
            },
            {
              "name": "3918",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/3918"
            },
            {
              "name": "MDKSA-2004:010",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
            },
            {
              "name": "CSSA-2004-013.0",
              "refsource": "CALDERA",
              "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-0078",
    "datePublished": "2004-09-01T04:00:00.000Z",
    "dateReserved": "2004-01-19T00:00:00.000Z",
    "dateUpdated": "2024-08-08T00:01:23.755Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2004-0078",
      "date": "2026-09-30",
      "epss": "0.05427",
      "percentile": "0.92449"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "780FC5AD-A7D9-436B-BF73-FDCDDDA9E744",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.2.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "996BC5D6-427B-43D6-B4C3-4AD814C20445",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D5A1DB8F-6BD5-4E1F-993A-FF5D0F807D43",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0B975F74-4B61-416B-B6B5-A36EF8123C94",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C891640E-91CC-495D-A7FF-454DCBF7F120",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C4247B37-30C6-4F19-A709-9A1D073B7AA8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.12_ol:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B5D5465E-6782-4AC0-9ECD-AB01EB448991",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.3.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5FF9A116-D09D-4ADE-AA32-CAF51CE1625A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.3.12.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DDB7D3BF-06F6-4A0A-9AE4-0EEF5D8E6AE4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.3.16:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BC8CB6D9-30F9-4C56-9CFD-F8E526E84526",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.3.17:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D1C760A5-D243-45C9-AE60-01F2703DDC01",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.3.22:*:*:*:*:*:*:*",
                    "matchCriteriaId": "198C2017-6101-482D-9AEF-DB052411C5D2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.3.24:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C0610C44-6CD3-4448-87AF-6CDFAA1909DE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.3.25:*:*:*:*:*:*:*",
                    "matchCriteriaId": "04186A67-E4A1-4A2A-B84F-585F9DD0E409",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.3.27:*:*:*:*:*:*:*",
                    "matchCriteriaId": "305135F0-E414-430B-AC1A-02A311E66899",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.3.28:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1A416609-0BE7-4528-85B0-17F53DFE0D0B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4C86071C-E508-4EFB-A98E-62CA2BEBB50A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mutt:mutt:1.4.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "65DB0D49-CD49-4EF6-9013-1B03E0D644D3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages."
          },
          {
            "lang": "es",
            "value": "Desbordamiento de b\u00fafer en el c\u00f3digo del men\u00fa de \u00edndice (menu_pad_string de menu.c) de Mutt 1.4.1 y anteriores permite a atacantes remotos causar una denegaci\u00f3n de servici\u00f3 (ca\u00edda) y posiblemente ejecutar c\u00f3digo arbitrario mediante ciertos mensajes de correo."
          }
        ],
        "id": "CVE-2004-0078",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 7.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": true,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2004-03-03T05:00:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://bugs.debian.org/126336"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.osvdb.org/3918"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.securityfocus.com/bid/9641"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.debian.org/126336"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/3918"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.securityfocus.com/bid/9641"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2025-11-21T13:33:40+00:00",
      "cve": "CVE-2004-0078",
      "id": "CVE-2004-0078",
      "initial_release_date": "2004-02-11T00:00:00+00:00",
      "product_status:fixed": "53",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2004/cve-2004-0078.json",
      "version": "3"
    }
  }
}

FKIE_CVE-2004-0078

Vulnerability from fkie_nvd - Published: 2004-03-03 05:00 - Updated: 2026-06-16 22:04

Severity

Summary

References

URL	Tags
cve@mitre.org	ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt
cve@mitre.org	http://bugs.debian.org/126336
cve@mitre.org	http://marc.info/?l=bugtraq&m=107651677817933&w=2
cve@mitre.org	http://marc.info/?l=bugtraq&m=107696262905039&w=2
cve@mitre.org	http://marc.info/?l=bugtraq&m=107884956930903&w=2
cve@mitre.org	http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010
cve@mitre.org	http://www.osvdb.org/3918
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2004-050.html	Patch, Vendor Advisory
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2004-051.html	Patch, Vendor Advisory
cve@mitre.org	http://www.securityfocus.com/bid/9641	Patch, Vendor Advisory
cve@mitre.org	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/15134
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838
af854a3a-2127-422b-91ae-364da2661108	ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt
af854a3a-2127-422b-91ae-364da2661108	http://bugs.debian.org/126336
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=107651677817933&w=2
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=107696262905039&w=2
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=107884956930903&w=2
af854a3a-2127-422b-91ae-364da2661108	http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/3918
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2004-050.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2004-051.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/9641	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/15134
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838

Impacted products

Vendor	Product	Version
mutt	mutt	1.2.1
mutt	mutt	1.2.5
mutt	mutt	1.2.5.1
mutt	mutt	1.2.5.4
mutt	mutt	1.2.5.5
mutt	mutt	1.2.5.12
mutt	mutt	1.2.5.12_ol
mutt	mutt	1.3.12
mutt	mutt	1.3.12.1
mutt	mutt	1.3.16
mutt	mutt	1.3.17
mutt	mutt	1.3.22
mutt	mutt	1.3.24
mutt	mutt	1.3.25
mutt	mutt	1.3.27
mutt	mutt	1.3.28
mutt	mutt	1.4.0
mutt	mutt	1.4.1

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "780FC5AD-A7D9-436B-BF73-FDCDDDA9E744",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "996BC5D6-427B-43D6-B4C3-4AD814C20445",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5A1DB8F-6BD5-4E1F-993A-FF5D0F807D43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B975F74-4B61-416B-B6B5-A36EF8123C94",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "C891640E-91CC-495D-A7FF-454DCBF7F120",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4247B37-30C6-4F19-A709-9A1D073B7AA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.2.5.12_ol:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5D5465E-6782-4AC0-9ECD-AB01EB448991",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.3.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FF9A116-D09D-4ADE-AA32-CAF51CE1625A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.3.12.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDB7D3BF-06F6-4A0A-9AE4-0EEF5D8E6AE4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.3.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC8CB6D9-30F9-4C56-9CFD-F8E526E84526",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.3.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1C760A5-D243-45C9-AE60-01F2703DDC01",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.3.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "198C2017-6101-482D-9AEF-DB052411C5D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.3.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0610C44-6CD3-4448-87AF-6CDFAA1909DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.3.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "04186A67-E4A1-4A2A-B84F-585F9DD0E409",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.3.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "305135F0-E414-430B-AC1A-02A311E66899",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.3.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A416609-0BE7-4528-85B0-17F53DFE0D0B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C86071C-E508-4EFB-A98E-62CA2BEBB50A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mutt:mutt:1.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "65DB0D49-CD49-4EF6-9013-1B03E0D644D3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer en el c\u00f3digo del men\u00fa de \u00edndice (menu_pad_string de menu.c) de Mutt 1.4.1 y anteriores permite a atacantes remotos causar una denegaci\u00f3n de servici\u00f3 (ca\u00edda) y posiblemente ejecutar c\u00f3digo arbitrario mediante ciertos mensajes de correo."
    }
  ],
  "id": "CVE-2004-0078",
  "lastModified": "2026-06-16T22:04:53.203",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2004-03-03T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.debian.org/126336"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/3918"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/9641"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.debian.org/126336"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/3918"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/9641"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-RRVH-PGQF-54PH

Vulnerability from github – Published: 2022-05-03 03:12 – Updated: 2022-05-03 03:12

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2004-0078"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2004-03-03T05:00:00Z",
    "severity": "HIGH"
  },
  "details": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.",
  "id": "GHSA-rrvh-pgqf-54ph",
  "modified": "2022-05-03T03:12:53Z",
  "published": "2022-05-03T03:12:53Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0078"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
    },
    {
      "type": "WEB",
      "url": "http://bugs.debian.org/126336"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/3918"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/9641"
    },
    {
      "type": "WEB",
      "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2004-0078

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2004-0078

Aliases

CVE-2004-0078

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2004-0078",
    "description": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.",
    "id": "GSD-2004-0078",
    "references": [
      "https://www.suse.com/security/cve/CVE-2004-0078.html",
      "https://access.redhat.com/errata/RHSA-2004:051",
      "https://access.redhat.com/errata/RHSA-2004:050"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2004-0078"
      ],
      "details": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.",
      "id": "GSD-2004-0078",
      "modified": "2023-12-13T01:22:54.037341Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2004-0078",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "SSA:2004-043",
            "refsource": "SLACKWARE",
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
          },
          {
            "name": "http://bugs.debian.org/126336",
            "refsource": "CONFIRM",
            "url": "http://bugs.debian.org/126336"
          },
          {
            "name": "20040215 LNSA-#2004-0001: mutt remote crash",
            "refsource": "BUGTRAQ",
            "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
          },
          {
            "name": "RHSA-2004:051",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
          },
          {
            "name": "oval:org.mitre.oval:def:811",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
          },
          {
            "name": "mutt-index-menu-bo(15134)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
          },
          {
            "name": "oval:org.mitre.oval:def:838",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
          },
          {
            "name": "9641",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/9641"
          },
          {
            "name": "20040211 Mutt-1.4.2 fixes buffer overflow.",
            "refsource": "BUGTRAQ",
            "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
          },
          {
            "name": "RHSA-2004:050",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
          },
          {
            "name": "20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt)",
            "refsource": "BUGTRAQ",
            "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
          },
          {
            "name": "3918",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/3918"
          },
          {
            "name": "MDKSA-2004:010",
            "refsource": "MANDRAKE",
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
          },
          {
            "name": "CSSA-2004-013.0",
            "refsource": "CALDERA",
            "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.2.5.12_ol:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.2.5.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.3.24:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.3.25:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.2.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.2.5.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.3.17:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.3.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.3.12.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.3.16:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.4.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.2.5.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.3.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.3.27:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.3.28:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mutt:mutt:1.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0078"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2004:050",
              "refsource": "REDHAT",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2004-050.html"
            },
            {
              "name": "RHSA-2004:051",
              "refsource": "REDHAT",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2004-051.html"
            },
            {
              "name": "9641",
              "refsource": "BID",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.securityfocus.com/bid/9641"
            },
            {
              "name": "http://bugs.debian.org/126336",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://bugs.debian.org/126336"
            },
            {
              "name": "CSSA-2004-013.0",
              "refsource": "CALDERA",
              "tags": [],
              "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt"
            },
            {
              "name": "MDKSA-2004:010",
              "refsource": "MANDRAKE",
              "tags": [],
              "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010"
            },
            {
              "name": "SSA:2004-043",
              "refsource": "SLACKWARE",
              "tags": [],
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.405053"
            },
            {
              "name": "3918",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/3918"
            },
            {
              "name": "20040211 Mutt-1.4.2 fixes buffer overflow.",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=107651677817933\u0026w=2"
            },
            {
              "name": "20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=107884956930903\u0026w=2"
            },
            {
              "name": "20040215 LNSA-#2004-0001: mutt remote crash",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=107696262905039\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:838",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838"
            },
            {
              "name": "oval:org.mitre.oval:def:811",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811"
            },
            {
              "name": "mutt-index-menu-bo(15134)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15134"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": true,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-10-10T01:30Z",
      "publishedDate": "2004-03-03T05:00Z"
    }
  }
}

RHSA-2004:050

Vulnerability from csaf_redhat - Published: 2004-02-11 13:58 - Updated: 2026-06-25 10:31

Summary

Red Hat Security Advisory: mutt security update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2004-0078.

CVE-2004-0078

Fixed: 32 products

https://access.redhat.com/errata/RHSA-2004:050

Open the full advisory

RHSA-2004:051

Vulnerability from csaf_redhat - Published: 2004-02-11 13:59 - Updated: 2025-11-21 17:26

Summary

Red Hat Security Advisory: : Updated mutt packages fix remotely-triggerable crash

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2004-0078.

CVE-2004-0078

Fixed: 1 product

https://access.redhat.com/errata/RHSA-2004:051

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2004-0078 (GCVE-0-2004-0078)

FKIE_CVE-2004-0078

GHSA-RRVH-PGQF-54PH

GSD-2004-0078

RHSA-2004:050

RHSA-2004:051

Tags

Sightings

Nomenclature

Related by attack behaviour