Mutt CRAM-MD5 Authentication Digest Handling Vulnerability

A vulnerability exists in Mutt versions prior to 2.3.2 in the way the IMAP CRAM-MD5 authentication digest is processed. The issue arises because the application sometimes uses strfcpy instead of memcpy, leading to potential truncation of the password hash. This flaw occurs in the auth_cram module when the password length exceeds the MD5 block size, causing the digest to be incorrectly handled. The vulnerability has been acknowledged but is not widely reported, likely due to the declining use of CRAM-MD5 and the rarity of passwords longer than 64 bytes.

Impact

Exploitation of this vulnerability could lead to incorrect handling of authentication digests, potentially allowing for authentication bypass or related issues.

Remediation

Users can upgrade to Mutt version 2.3.2 or later, where this vulnerability has been addressed.