CVE-2020-28896 Information disclosure in n/a
Attackers can intercept email authentication credentials via man-in-the-middle attacks due to improper TLS enforcement in Mutt and NeoMutt clients.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-28896?
CVE-2020-28896 is a medium-severity vulnerability in Debian Debian Linux, published on 23 Nov 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.
Which versions are affected by CVE-2020-28896?
It affects 3 products.
Linux distribution packages (27)
mutt SUSE:Enterprise Storage 5 | All versions | 1.10.1-55.18.1 |
mutt SUSE:HPE Helion OpenStack 8 | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise High Performance Computing 15-ESPOS | All versions | 1.10.1-3.11.1 |
mutt SUSE:Linux Enterprise High Performance Computing 15-LTSS | All versions | 1.10.1-3.11.1 |
mutt SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 1.10.1-3.11.1 |
mutt SUSE:Linux Enterprise Module for Basesystem 15 SP2 | All versions | 1.10.1-3.11.1 |
mutt SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 1.5.17-42.56.1 |
mutt SUSE:Linux Enterprise Server 11 SP4-LTSS | All versions | 1.5.17-42.56.1 |
mutt SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server 12 SP3-BCL | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server 12 SP3-LTSS | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server 12 SP4-LTSS | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server 12 SP5 | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server 15-LTSS | All versions | 1.10.1-3.11.1 |
mutt SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 1.10.1-55.18.1 |
mutt SUSE:Linux Enterprise Server for SAP Applications 15 | All versions | 1.10.1-3.11.1 |
mutt SUSE:OpenStack Cloud 7 | All versions | 1.10.1-55.18.1 |
mutt SUSE:OpenStack Cloud 8 | All versions | 1.10.1-55.18.1 |
mutt SUSE:OpenStack Cloud 9 | All versions | 1.10.1-55.18.1 |
mutt SUSE:OpenStack Cloud Crowbar 8 | All versions | 1.10.1-55.18.1 |
mutt SUSE:OpenStack Cloud Crowbar 9 | All versions | 1.10.1-55.18.1 |
mutt openSUSE:Leap 15.1 | All versions | 1.10.1-lp151.2.6.1 |
mutt openSUSE:Leap 15.2 | All versions | 1.10.1-lp152.3.6.1 |
Products include Debian Debian Linux, Mutt Mutt, Neomutt Neomutt.
How do I fix CVE-2020-28896?
Upgrade to a fixed version.
Is CVE-2020-28896 being exploited?
There is no known exploitation of CVE-2020-28896 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2020-28896, DLA-2472-1, GHSA-346p-qx4x-g348, MGASA-2020-0448, OESA-2021-1005, SUSE-SU-2020:14551-1 and 6 more.