PT-2001-1616 · Ritlabs · The Bat!

Publicado 2001-05-24 · Atualizado 2008-09-05 · CVE-2001-0398

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions The BAT! mail client (affected versions not specified)

Description The issue allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands. This is achieved by sending an attachment whose file name contains many spaces, causing the mail client to misrepresent the attachment's type with a different icon.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-0398

Produtos afetados

The Bat!

Referências · 3

• 🔥 http://securityfocus.com/bid/2530 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0398 · Nota de Segurança