iDefense has released a new vulnerability within GNU Mailutils.  Mailutils is a collection of mail-related utilities, with the vulnerability applying specifically to the 0.6 version and imap4d daemon.  The exploit "could allow an authenticated attacker to execute arbitrary code."  As well, iDefense is "unaware of any effective workaround for this issue".

Patch Link
http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407

Vulnerability Link
http://www.idefense.com/application/poi/display?id=303

GNU Mailutils information
http://www.gnu.org/software/mailutils/mailutils.html


Tony Carothers
Handler on Duty