Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
Version | Base score | Base severity | Vector |
---|
Hyperlink | Resource Type |
---|
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
Type | CWE ID | Description |
---|---|---|
text | N/A | n/a |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
Hyperlink | Resource |
---|---|
http://online.securityfocus.com/advisories/3778 | vendor-advisory x_refsource_HP |
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc | vendor-advisory x_refsource_FREEBSD |
http://www.debian.org/security/2002/dsa-096 | vendor-advisory x_refsource_DEBIAN |
http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html | x_refsource_CONFIRM |
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449 | vendor-advisory x_refsource_CONECTIVA |
http://www.iss.net/security_center/static/7759.php | vdb-entry x_refsource_XF |
http://www.securityfocus.com/bid/3774 | vdb-entry x_refsource_BID |
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt | vendor-advisory x_refsource_CALDERA |
http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html | vendor-advisory x_refsource_SUSE |
http://marc.info/?l=bugtraq&m=100994648918287&w=2 | mailing-list x_refsource_BUGTRAQ |
http://www.redhat.com/support/errata/RHSA-2002-003.html | vendor-advisory x_refsource_REDHAT |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
Date Added | Due Date | Vulnerability Name | Required Action |
---|---|---|---|
N/A |
Type | Version | Base score | Base severity | Vector |
---|---|---|---|---|
Primary | 2.0 | 7.5 | HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
CWE ID | Type | Source |
---|---|---|
NVD-CWE-Other | Primary | nvd@nist.gov |