PT-2002-1110 · Mutt · Mutt

Published 2002-01-03 · Updated 2016-10-18 · CVE-2002-0001

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mutt versions 1.2.0 through 1.2.5 mutt versions 1.3.x through 1.3.24

Description The issue allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list. This is due to a vulnerability in the RFC822 address parser.

Recommendations For mutt versions 1.2.0 through 1.2.5, update to version 1.2.5.1 or later. For mutt versions 1.3.x through 1.3.24, update to version 1.3.25 or later.

Fix

Related Identifiers

CVE-2002-0001

Affected Products

Mutt

References · 12

• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt · Vendor Advisory
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0001 · Security Note
• http://novell.com/linux/security/advisories/2002_001_mutt_txt.html · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449 · Vendor Advisory
• http://online.securityfocus.com/advisories/3778 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-003.html · Patch, Vendor Advisory
• http://mutt.org/announce/mutt-1.2.5.1-1.3.25.html · Note
• http://securityfocus.com/bid/3774 · Note
• http://marc.info/?l=bugtraq&m=100994648918287&w=2 · Note
• http://debian.org/security/2002/dsa-096 · Patch, Vendor Advisory
• http://iss.net/security_center/static/7759.php · Note