CVE-2002-0001

{"id": "CVE-2002-0001", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-02-27T05:00:00.000", "references": [{"url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt", "source": "cve@mitre.org"}, {"url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc", "source": "cve@mitre.org"}, {"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=100994648918287&w=2", "source": "cve@mitre.org"}, {"url": "http://online.securityfocus.com/advisories/3778", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2002/dsa-096", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/7759.php", "source": "cve@mitre.org"}, {"url": "http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html", "source": "cve@mitre.org"}, {"url": "http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2002-003.html", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3774", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list."}, {"lang": "es", "value": "Vulnerabilidad en el analizador de direcciones RFC822 de mutt (versiones 1.2.5.1 y anteriores y 1.3.x hasta la 1.3.35), permite que atacantes remotos puedan ejecutar comandos arbitrarios por medio de un comentario o frase mal terminado en la lista de direcciones."}], "lastModified": "2016-10-18T02:15:23.723", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7335B1D2-823F-404D-B6C8-7E789B20D4BD", "versionEndIncluding": "1.2.5.1"}, {"criteria": "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CEA8211-EF60-4538-A263-289B7EEEF230", "versionEndIncluding": "1.3.25"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}