CVE-2002-0001

Summary

Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://online.securityfocus.com/advisories/3778
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc
• http://www.debian.org/security/2002/dsa-096
• http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449
• http://www.iss.net/security_center/static/7759.php
• http://www.securityfocus.com/bid/3774
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt
• http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html
• http://marc.info/?l=bugtraq&m=100994648918287&w=2
• http://www.redhat.com/support/errata/RHSA-2002-003.html

References

• http://online.securityfocus.com/advisories/3778
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc
• http://www.debian.org/security/2002/dsa-096
• http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449
• http://www.iss.net/security_center/static/7759.php
• http://www.securityfocus.com/bid/3774
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt
• http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html
• http://marc.info/?l=bugtraq&m=100994648918287&w=2
• http://www.redhat.com/support/errata/RHSA-2002-003.html

• ←Previous
• Next→