CVE-2002-0001
First published: Thu Jan 03 2002(Updated: )
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mutt | <=1.3.25 | |
| Mutt | <=1.2.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2002/dsa-096
- http://www.redhat.com/support/errata/RHSA-2002-003.html
- http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html
- http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html
- http://online.securityfocus.com/advisories/3778
- http://www.securityfocus.com/bid/3774
- http://www.iss.net/security_center/static/7759.php
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449
- http://marc.info/?l=bugtraq&m=100994648918287&w=2
Frequently Asked Questions
What is the severity of CVE-2002-0001?
CVE-2002-0001 has a critical severity level due to its potential to allow remote command execution.
How do I fix CVE-2002-0001?
To fix CVE-2002-0001, you should update Mutt to version 1.2.5.1 or later for the 1.2.x series and version 1.3.25 or later for the 1.3.x series.
Which versions of Mutt are affected by CVE-2002-0001?
CVE-2002-0001 affects Mutt versions prior to 1.2.5.1 and 1.3.x versions before 1.3.25.
Who can exploit CVE-2002-0001?
CVE-2002-0001 can be exploited by remote attackers who can send specially crafted emails to users of vulnerable Mutt versions.
What type of vulnerability is CVE-2002-0001?
CVE-2002-0001 is a command execution vulnerability that occurs due to improper handling of the RFC822 address parser.
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/mutt
- canonical/mutt
- version/mutt/1.3.25
- version/mutt/1.2.5.1