CVE

Id
4395  
CVE No.
CVE-2002-0001  
Status
Candidate  
Description
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.  
Phase
Modified (20050707)  
Votes
ACCEPT(4) Baker, Cole, Green, Wall | MODIFY(1) Frech | NOOP(2) Christey, Foat  
Comments
Christey> I need to review this for accuracy; is it just a buffer | overflow? See Mark Cox" comments in his "Chinese Whisper" | article. | Frech> XF:mutt-address-handling-bo(7759) | Christey> See Caldera advisory for a good, short description of the | issue. | BID:3774 | URL:http://www.securityfocus.com/bid/3774 | SUSE:SuSE-SA:2002:001 | URL:http://www.suse.de/de/support/security/2002_001_mutt_txt.html | CONECTIVA:CLA-2002:449 | DEBIAN:DSA-096 | FREEBSD:FreeBSD-SA-02:04 | HP:HPSBTL0201-011 | URL:http://online.securityfocus.com/advisories/3778 | CALDERA:CSSA-2002-002.0 | URL:http://www.calderasystems.com/support/security/advisories/CSSA-2002-002.0.txt  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
20996 4395 CVE-2002-0001 BUGTRAQ:20020101 [Announce] SECURITY: mutt-1.2.5.1 and mutt-1.3.25 released.  View
20997 4395 CVE-2002-0001 URL:http://marc.info/?l=bugtraq&m=100994648918287&w=2  View
20998 4395 CVE-2002-0001 CONFIRM:http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html  View
20999 4395 CVE-2002-0001 DEBIAN:DSA-096  View
21000 4395 CVE-2002-0001 URL:http://www.debian.org/security/2002/dsa-096  View
21001 4395 CVE-2002-0001 REDHAT:RHSA-2002:003  View
21002 4395 CVE-2002-0001 URL:http://www.redhat.com/support/errata/RHSA-2002-003.html  View
21003 4395 CVE-2002-0001 SUSE:SuSE-SA:2002:001  View
21004 4395 CVE-2002-0001 URL:http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html  View
21005 4395 CVE-2002-0001 CONECTIVA:CLA-2002:449  View
21006 4395 CVE-2002-0001 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449  View
21007 4395 CVE-2002-0001 FREEBSD:FreeBSD-SA-02:04  View
21008 4395 CVE-2002-0001 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc  View
21009 4395 CVE-2002-0001 HP:HPSBTL0201-011  View
21010 4395 CVE-2002-0001 URL:http://online.securityfocus.com/advisories/3778  View
21011 4395 CVE-2002-0001 CALDERA:CSSA-2002-002.0  View
21012 4395 CVE-2002-0001 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt  View
21013 4395 CVE-2002-0001 BID:3774  View
21014 4395 CVE-2002-0001 URL:http://www.securityfocus.com/bid/3774  View
21015 4395 CVE-2002-0001 XF:mutt-address-handling-bo(7759)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63674 JVNDB-2002-000001 Mutt のメールヘッダの処理におけるバッファオーバーフローの脆弱性 Mutt において、電子メールのヘッダに異常に長いの文字列が含まれている場合に、バッファオーバーフローを発生する脆弱性が存在します。 CVE-2002-0001 4395 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000001.html  View