CVE-2002-0001

Published: Feb 27, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.

Affected (2)

Products: Mutt: Mutt

Mutt

1 product

Mutt

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mutt Mutt	Up to 1.2.5.1
Mutt Mutt	Up to 1.3.25

References (22)

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt (unsafe URL)

Source: cve@mitre.org

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc (unsafe URL)

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=100994648918287&w=2

Source: cve@mitre.org

http://online.securityfocus.com/advisories/3778

Source: cve@mitre.org

http://www.debian.org/security/2002/dsa-096

Source: cve@mitre.org

Patch

http://www.iss.net/security_center/static/7759.php

Source: cve@mitre.org

http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-003.html

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/3774

Source: cve@mitre.org

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt (unsafe URL)