CVE-1999-0941: High severity Mutt Mutt vulnerability
Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Muttfrom your environment.Uninstall Mutt if it is not required on the system to eliminate the vulnerable component.
- Configuration
Disable any Mutt features that allow passing input to a shell (shell escapes, external command execution, macros that run shell commands) to prevent execution via shell metacharacters.
Mutt shell/command execution = disable - Compensating control
Reduce exposure of systems running Mutt: isolate or network-segment them, restrict inbound/outbound access with firewall rules or ACLs, and run Mutt in a confined environment (container/sandbox) to limit impact of remote command execution.
- Operational
If exploitation is suspected, investigate logs and system integrity, rebuild or remediate affected hosts, and rotate any credentials or secrets that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0941?
CVE-1999-0941 is classified as a security vulnerability that can potentially allow remote command execution.
How does CVE-1999-0941 affect the Mutt mail client?
CVE-1999-0941 allows remote attackers to execute arbitrary commands by exploiting shell metacharacters in the Mutt mail client.
How can I mitigate CVE-1999-0941 in Mutt version 0.95.6?
To mitigate CVE-1999-0941, users should upgrade to a patched version of Mutt that addresses this vulnerability.
Is CVE-1999-0941 a common vulnerability?
CVE-1999-0941 has been known for a long time and highlights the importance of validating input to prevent command injection vulnerabilities.
What versions of Mutt are affected by CVE-1999-0941?
CVE-1999-0941 specifically affects Mutt version 0.95.6.