The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0112 advisory.

    This advisory aggregates security fixes for the mutt SRPM in CIQ LTS 8.6. It addresses 8 CVEs:
    CVE-2022-1328, CVE-2007-2683, CVE-2014-9116, CVE-2009-1390, CVE-2007-1558, and 3 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A flaw was found in the way fetchmail processed certain APOP authentication requests. By sending certain responses when fetchmail attempted to authenticate against an APOP server, a remote attacker could potentially acquire certain portions of a user's authentication credentials. (CVE-2007-1558)

From Red Hat Security Advisory 2007:0401 :

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the way Thunderbird processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. (CVE-2007-2867, CVE-2007-2868)

Several denial of service flaws were found in the way Thunderbird handled certain form and cookie data. A malicious website that is able to set arbitrary form and cookie data could prevent Thunderbird from functioning properly. (CVE-2007-1362, CVE-2007-2869)

A flaw was found in the way Thunderbird processed certain APOP authentication requests. By sending certain responses when Thunderbird attempted to authenticate against an APOP server, a remote attacker could potentially acquire certain portions of a user's authentication credentials. (CVE-2007-1558)

A flaw was found in the way Thunderbird displayed certain web content.
A malicious web page could generate content which could overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site.
(CVE-2007-2871)

Users of Thunderbird are advised to apply this update, which contains Thunderbird version 1.5.0.12 that corrects these issues.

This update brings Mozilla Thunderbird to security update version 1.5.0.12.

  - MFSA 2007-17 / CVE-2007-2871 :

    Chris Thomas demonstrated that XUL popups opened by web     content could be placed outside the boundaries of the     content area. This could be used to spoof or hide parts     of the browser chrome such as the location bar.

  - MFSA 2007-16 / CVE-2007-2870 :

    Mozilla contributor moz_bug_r_a4 demonstrated that the     addEventListener method could be used to inject script     into another site in violation of the browser's     same-origin policy. This could be used to access or     modify private or valuable information from that other     site.

  - MFSA 2007-15 / CVE-2007-1558 :

    Ga&euml;tan Leurent informed us of a weakness in APOP     authentication that could allow an attacker to recover     the first part of your mail password if the attacker     could interpose a malicious mail server on your network     masquerading as your legitimate mail server. With normal     settings it could take several hours for the attacker to     gather enough data to recover just a few characters of     the password. This result was presented at the Fast     Software Encryption 2007 conference. 

  - MFSA 2007-14 / CVE-2007-1362 :

    Nicolas Derouet reported two problems with cookie     handling in Mozilla clients. Insufficient length checks     could be use to exhaust browser memory and so to crash     the browser or at least slow it done by a large degree.

    The second issue was that the cookie path and name     values were not checked for the presence of the     delimiter used for internal cookie storage, and if     present this confused future interpretation of the     cookie data. This is not considered to be exploitable.

  - MFSA 2007-13 / CVE-2007-2869 :

    Marcel reported that a malicious web page could perform     a denial of service attack against the form autocomplete     feature that would persist from session to session until     the malicious form data was deleted. Filling a text     field with millions of characters and submitting the     form will cause the victim's browser to hang for up to     several minutes while the form data is read, and this     will happen the first time autocomplete is triggered     after every browser restart. 

    No harm is done to the user's computer, but the     frustration caused by the hang could prevent use of     Thunderbird if users don't know how to clear the bad     state.

  - MFSA 2007-12 / CVE-2007-2867 / CVE-2007-2868

    As part of the Thunderbird 2.0.0.4 and 1.5.0.12 update     releases Mozilla developers fixed many bugs to improve     the stability of the product. Some of these crashes that     showed evidence of memory corruption under certain     circumstances and we presume that with enough effort at     least some of these could be exploited to run arbitrary     code. 

    Without further investigation we cannot rule out the     possibility that for some of these an attacker might be     able to prepare memory for exploitation through some     means other than JavaScript, such as large images.

  - MFSA 2007-11 / CVE-2007-1562 :

    Incorrect FTP PASV handling could be used by malicious     ftp servers to do a rudimentary port scanning of for     instance internal networks of the computer the browser     is running on.

This update fixes two security issues found in the 2.0.0.0 version of Thunderbird.

Details at:
http://www.mozilla.org/security/announce/2007/mfsa2007-12.html http://www.mozilla.org/security/announce/2007/mfsa2007-15.html

Users of Thunderbird are recommended to update to this erratum package which fixes those issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Matthias Andree reports :

The POP3 standard, currently RFC-1939, has specified an optional, MD5-based authentication scheme called 'APOP' which no longer should be considered secure.

Additionally, fetchmail's POP3 client implementation has been validating the APOP challenge too lightly and accepted random garbage as a POP3 server's APOP challenge. This made it easier than necessary for man-in-the-middle attackers to retrieve by several probing and guessing the first three characters of the APOP secret, bringing brute forcing the remaining characters well within reach.

Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Evolution is the GNOME collection of personal information management (PIM) tools.

A flaw was found in the way Evolution processed certain APOP authentication requests. A remote attacker could potentially acquire certain portions of a user's authentication credentials by sending certain responses when evolution-data-server attempted to authenticate against an APOP server. (CVE-2007-1558)

All users of Evolution should upgrade to these updated packages, which contain a backported patch which resolves this issue.

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the way Thunderbird processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. (CVE-2007-2867, CVE-2007-2868)

Several denial of service flaws were found in the way Thunderbird handled certain form and cookie data. A malicious website that is able to set arbitrary form and cookie data could prevent Thunderbird from functioning properly. (CVE-2007-1362, CVE-2007-2869)

A flaw was found in the way Thunderbird processed certain APOP authentication requests. By sending certain responses when Thunderbird attempted to authenticate against an APOP server, a remote attacker could potentially acquire certain portions of a user's authentication credentials. (CVE-2007-1558)

A flaw was found in the way Thunderbird displayed certain web content.
A malicious web page could generate content which could overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site.
(CVE-2007-2871)

Users of Thunderbird are advised to apply this update, which contains Thunderbird version 1.5.0.12 that corrects these issues.

An updated fetchmail package that fixes a security bug is now available for Red Hat Enterprise Linux 2.1, 3, 4 and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections.

A flaw was found in the way fetchmail processed certain APOP authentication requests. By sending certain responses when fetchmail attempted to authenticate against an APOP server, a remote attacker could potentially acquire certain portions of a user's authentication credentials. (CVE-2007-1558)

All users of fetchmail should upgrade to this updated package, which contains a backported patch to correct this issue.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0344 advisory.

    [1.8.0-15.0.3.el5]
     - Add patch for RH bug #235289 (APOP authentication vulnerability).

     [1.8.0-15.0.2.el5]
     - Remove Makefile.in changes that accidentally slipped into the patch.

     [1.8.0-15.0.1.el5]
     - Add patch for RH bug #229707 (timezone updates).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
355913	Rocky Linux 8.6 [CIQ] Security Update: mutt / mutt-debuginfo / mutt-debugsource Multiple Vulnerabilities (ciqsa-2026_0112)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	medium
60196	Scientific Linux Security Update : fetchmail on SL5.x, SL4.x, SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	low
67510	Oracle Linux 4 : thunderbird (ELSA-2007-0401)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
27130	openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-3545)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	high
27670	Fedora 7 : thunderbird-2.0.0.4-1.fc7 (2007-0544)	Nessus	Fedora Local Security Checks	2007/11/6	2021/1/11	high
25018	FreeBSD : fetchmail -- insecure APOP authentication (f1c4d133-e6d3-11db-99ea-0060084a00e5)	Nessus	FreeBSD Local Security Checks	2007/4/10	2021/1/6	low
25255	CentOS 3 / 4 : evolution (CESA-2007:0353)	Nessus	CentOS Local Security Checks	2007/5/20	2021/1/4	low
25366	RHEL 4 / 5 : thunderbird (RHSA-2007:0401)	Nessus	Red Hat Local Security Checks	2007/6/1	2021/1/14	high
25447	CentOS 3 / 4 / 5 : fetchmail (CESA-2007:0385)	Nessus	CentOS Local Security Checks	2007/6/7	2021/1/4	low
67492	Oracle Linux 5 : Moderate: / evolution-data-server (ELSA-2007-0344)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high

偵測

搜尋 Plugin

medium

low

high

high

high

low

low

high

low

high