CVE-2002-0001

Published Feb 27, 2002

Last updated 8 years ago

Overview

Description: Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7335B1D2-823F-404D-B6C8-7E789B20D4BD",
            "versionEndIncluding": "1.2.5.1"
          },
          {
            "criteria": "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9CEA8211-EF60-4538-A263-289B7EEEF230",
            "versionEndIncluding": "1.3.25"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References