CVEvulnerability

CVE-2002-0001

7.5 HIGH Published 2002-02-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-02-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.

Affected configurations

• mutt mutt (<= 1.2.5.1) • mutt mutt (<= 1.3.25)

Related

Referenced by CWE · observed example (2)

  • CWE-147 Improper Neutralization of Input Terminators weakness
  • CWE-151 Improper Neutralization of Comment Delimiters weakness

References