CVE-2001-0398
Summary
| CVE | CVE-2001-0398 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2001-06-18 04:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon. |
Risk And Classification
Primary CVSS: v2.0 7.5 from [email protected]
AV:N/AC:L/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ritlabs | The Bat | 1.011 | All | All | All |
| Application | Ritlabs | The Bat | 1.015 | All | All | All |
| Application | Ritlabs | The Bat | 1.028 | All | All | All |
| Application | Ritlabs | The Bat | 1.029 | All | All | All |
| Application | Ritlabs | The Bat | 1.031 | All | All | All |
| Application | Ritlabs | The Bat | 1.032 | All | All | All |
| Application | Ritlabs | The Bat | 1.035 | All | All | All |
| Application | Ritlabs | The Bat | 1.036 | All | All | All |
| Application | Ritlabs | The Bat | 1.037 | All | All | All |
| Application | Ritlabs | The Bat | 1.039 | All | All | All |
| Application | Ritlabs | The Bat | 1.041 | All | All | All |
| Application | Ritlabs | The Bat | 1.043 | All | All | All |
| Application | Ritlabs | The Bat | 1.0_build1336 | All | All | All |
| Application | Ritlabs | The Bat | 1.0_build1349 | All | All | All |
| Application | Ritlabs | The Bat | 1.1 | All | All | All |
| Application | Ritlabs | The Bat | 1.101 | All | All | All |
| Application | Ritlabs | The Bat | 1.14 | All | All | All |
| Application | Ritlabs | The Bat | 1.15 | All | All | All |
| Application | Ritlabs | The Bat | 1.17 | All | All | All |
| Application | Ritlabs | The Bat | 1.18 | All | All | All |
| Application | Ritlabs | The Bat | 1.19 | All | All | All |
| Application | Ritlabs | The Bat | 1.21 | All | All | All |
| Application | Ritlabs | The Bat | 1.22 | All | All | All |
| Application | Ritlabs | The Bat | 1.31 | All | All | All |
| Application | Ritlabs | The Bat | 1.32 | All | All | All |
| Application | Ritlabs | The Bat | 1.33 | All | All | All |
| Application | Ritlabs | The Bat | 1.34 | All | All | All |
| Application | Ritlabs | The Bat | 1.35 | All | All | All |
| Application | Ritlabs | The Bat | 1.36 | All | All | All |
| Application | Ritlabs | The Bat | 1.39 | All | All | All |
| Application | Ritlabs | The Bat | 1.41 | All | All | All |
| Application | Ritlabs | The Bat | 1.42 | All | All | All |
| Application | Ritlabs | The Bat | 1.42f | All | All | All |
| Application | Ritlabs | The Bat | 1.43 | All | All | All |
| Application | Ritlabs | The Bat | 1.44 | All | All | All |
| Application | Ritlabs | The Bat | 1.45 | All | All | All |
| Application | Ritlabs | The Bat | 1.46 | All | All | All |
| Application | Ritlabs | The Bat | 1.47 | All | All | All |
| Application | Ritlabs | The Bat | 1.48 | All | All | All |
| Application | Ritlabs | The Bat | 1.49 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Rit Research Labs "The Bat!" Concealed Attachment Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Exploit, Patch, Vendor Advisory |
| Neohapsis Archives - Bugtraq - ~..~!guano - From [email protected] | af854a3a-2127-422b-91ae-364da2661108 | archives.neohapsis.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.