CVE-2002-0338 The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name.
MediumCVSS 5.0
EPSS 3.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ritlabs the bat | = 1.53d | No fix listed |
| ritlabs the bat | = 1.54d | No fix listed |
References
- 20020227 SECURITY.NNOV: Special device access in The Bat! mailing-list
- thebat-msdos-device-dos(8303) patch vdb-entry vendor-advisory
- 4187 exploit patch vdb-entry vendor-advisory