Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2001-0398 | First vendor Publication | 2001-06-18 |
| Vendor | Cve | Last vendor Modification | 2008-09-05 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0398 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 13867 | The Bat! Mail Client Malformed Attachment Name Arbitrary Command Execution |
Sources (Detail)
| Source | Url |
|---|---|
| BID | http://www.securityfocus.com/bid/2530 |
| BUGTRAQ | http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html |
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:01:21 |
|
| 2021-04-22 01:01:32 |
|
| 2020-05-23 00:14:36 |
|
| 2017-11-09 12:01:28 |
|
| 2013-05-11 12:03:57 |
|
