Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2002-0001 | A dangerous address label Imagine an envelope's address confusing the mail sorter so badly that it follows the sender's instructions. A flaw in Mutt's email address parser could let remote attackers run arbitrary commands. Even metadata needs safe parsing.
CVE-2002-0001, visualized: a mail sorter must safely handle a broken address, not turn it into an instruction. Mutt’s RFC822 address parser could allow remote attackers to execute arbitrary commands through an improperly terminated comment or phrase in an address list. The affected releases were before 1.2.5.1 and 1.3.x before 1.3.25. Source: https://www.cve.org/CVERecord?id=CVE-2002-0001
The flaw involved an improperly terminated comment or phrase in an address list. It affected Mutt before 1.2.5.1 and the 1.3 branch before 1.3.25. Lesson: treat email headers as untrusted input. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2002/0xxx/CVE-2002-0001.json
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mutt | mutt | - | - | - |