CVE-2001-0398 The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also cause...
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ritlabs the bat | = 1.0_build1336 | No fix listed |
| ritlabs the bat | = 1.0_build1349 | No fix listed |
| ritlabs the bat | = 1.1 | No fix listed |
| ritlabs the bat | = 1.011 | No fix listed |
| ritlabs the bat | = 1.14 | No fix listed |
| ritlabs the bat | = 1.15 | No fix listed |
| ritlabs the bat | = 1.015 | No fix listed |
| ritlabs the bat | = 1.17 | No fix listed |
| ritlabs the bat | = 1.18 | No fix listed |
| ritlabs the bat | = 1.19 | No fix listed |
| ritlabs the bat | = 1.21 | No fix listed |
| ritlabs the bat | = 1.22 | No fix listed |
| ritlabs the bat | = 1.028 | No fix listed |
| ritlabs the bat | = 1.029 | No fix listed |
| ritlabs the bat | = 1.31 | No fix listed |
| ritlabs the bat | = 1.031 | No fix listed |
| ritlabs the bat | = 1.32 | No fix listed |
| ritlabs the bat | = 1.032 | No fix listed |
| ritlabs the bat | = 1.33 | No fix listed |
| ritlabs the bat | = 1.34 | No fix listed |
| ritlabs the bat | = 1.035 | No fix listed |
| ritlabs the bat | = 1.35 | No fix listed |
| ritlabs the bat | = 1.036 | No fix listed |
| ritlabs the bat | = 1.36 | No fix listed |
| ritlabs the bat | = 1.037 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ritlabs the bat | = 1.39 | No fix listed |
| ritlabs the bat | = 1.039 | No fix listed |
| ritlabs the bat | = 1.041 | No fix listed |
| ritlabs the bat | = 1.41 | No fix listed |
| ritlabs the bat | = 1.42 | No fix listed |
| ritlabs the bat | = 1.42f | No fix listed |
| ritlabs the bat | = 1.043 | No fix listed |
| ritlabs the bat | = 1.43 | No fix listed |
| ritlabs the bat | = 1.44 | No fix listed |
| ritlabs the bat | = 1.45 | No fix listed |
| ritlabs the bat | = 1.46 | No fix listed |
| ritlabs the bat | = 1.47 | No fix listed |
| ritlabs the bat | = 1.48 | No fix listed |
| ritlabs the bat | = 1.49 | No fix listed |
| ritlabs the bat | = 1.101 | No fix listed |
References
- 20010402 ~..~!guano mailing-list vendor-advisory
- 2530 exploit patch vdb-entry vendor-advisory