CVEvulnerability
CVE-2001-0398
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-06-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon.
Affected configurations
• ritlabs the bat 1.0 build1336
• ritlabs the bat 1.0 build1349
• ritlabs the bat 1.1
• ritlabs the bat 1.011
• ritlabs the bat 1.14
• ritlabs the bat 1.15
• ritlabs the bat 1.015
• ritlabs the bat 1.17
• ritlabs the bat 1.18
• ritlabs the bat 1.19
• ritlabs the bat 1.21
• ritlabs the bat 1.22
• ritlabs the bat 1.028
• ritlabs the bat 1.029
• ritlabs the bat 1.31
• ritlabs the bat 1.031
• ritlabs the bat 1.32
• ritlabs the bat 1.032
• ritlabs the bat 1.33
• ritlabs the bat 1.34
• ritlabs the bat 1.035
• ritlabs the bat 1.35
• ritlabs the bat 1.036
• ritlabs the bat 1.36
• ritlabs the bat 1.037
• ritlabs the bat 1.39
• ritlabs the bat 1.039
• ritlabs the bat 1.041
• ritlabs the bat 1.41
• ritlabs the bat 1.42
• ritlabs the bat 1.42f
• ritlabs the bat 1.043
• ritlabs the bat 1.43
• ritlabs the bat 1.44
• ritlabs the bat 1.45
• ritlabs the bat 1.46
• ritlabs the bat 1.47
• ritlabs the bat 1.48
• ritlabs the bat 1.49
• ritlabs the bat 1.101
Related
Referenced by CWE · observed example (1)
- CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html Vendor Advisory
- http://www.securityfocus.com/bid/2530 Exploit, Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html Vendor Advisory
- http://www.securityfocus.com/bid/2530 Exploit, Patch, Vendor Advisory