CVE-2011-1429: Mutt

Medium severity, CVSS 5.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766.

Affected products

• Mutt Mutt: any version

Published 2011-03-16. Last modified 2026-06-16.