CVE-2007-2683

Mutt 1.4.2 - Buffer Overflow via GECOS Field Alias Expansion

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2683. PoCs published by raylai.

AI-analyzed exploit summary This exploit leverages a local buffer overflow in Mutt by creating a user with a long username and shellcode in the comment field, then triggering the vulnerability via a crafted alias in the Mutt configuration file. Successful exploitation can lead to arbitrary code execution with the victim's privileges.

Description

Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.

Exploits (1)

exploitdb WORKING POC VERIFIED
by raylai · textlocallinux
https://www.exploit-db.com/exploits/30093

This exploit leverages a local buffer overflow in Mutt by creating a user with a long username and shellcode in the comment field, then triggering the vulnerability via a crafted alias in the Mutt configuration file. Successful exploitation can lead to arbitrary code execution with the victim's privileges.

Classification
Working Poc 90%
Attack Type
Lpe
Complexity
Moderate
Reliability
Racy
Target: Mutt (versions affected by CVE-2007-2683)
Auth required
Prerequisites: Local access to the target system · Ability to create users · Ability to modify ~/.muttrc
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (16)

Core 16
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25529
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018066
Vendor Advisory vendor-advisory x_refsource_trustix
http://www.trustix.org/errata/2007/0024/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26415
Various Sources x_refsource_misc
http://dev.mutt.org/trac/ticket/2885
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25408
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/34973
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10543
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25546
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25515
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34441
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:113
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0386.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24192
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1391

Scores

EPSS 0.0081
EPSS Percentile 53.0%

Details

Status published
Products (1)
mutt/mutt 1.4.2
Published May 15, 2007
Tracked Since Feb 18, 2026