PT-2003-2086 · Ritlabs · The Bat!

Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-1133

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions The Bat! versions 1.0.11 through 2.0

Description The issue allows local users to read other users' email messages due to insecure ACLs used when creating new accounts.

Recommendations For versions 1.0.11 through 2.0, consider modifying the account creation process to use secure ACLs, restricting access to email messages for each user.

Exploit

Fix

Related Identifiers

CVE-2003-1133

Affected Products

The Bat!

References · 5

• 🔥 http://securityfocus.com/archive/1/342485 · Exploit
• 🔥 http://securitytracker.com/id?1008004 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1133 · Security Note
• http://securityfocus.com/bid/8891 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13527 · Note