Back to Database
Status published
High
CVE-2001-0398
The BAT! mail client allows remote attackers to bypass user...
Vulnerability Description
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-0398
Credits & Attribution
No credits recorded in the NVD database.
References
More from ritlabs
View All →CVE-2006-0918
Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers...
High
7.5
CVE-2006-0630
RITLabs The Bat! before 3.0.0.15 displays certain important headers from...
Medium
5
CVE-2003-1133
Rit Research Labs The Bat! 1.0.11 through 2.0 creates new...
Low
2.1
CVE-2002-0338
The Bat! 1.53d and 1.54beta, and possibly other versions, allows...
Medium
5
CVE-2001-0676
Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f...
Medium
5
Affected Vendor
ritlabs
View all reports →Affected Software
the bat
Vulnerable Versions:
1.0_build1336, 1.0_build1349, 1.1, 1.011, 1.14, 1.15, 1.015, 1.17, 1.18, 1.19, 1.21, 1.22, 1.028, 1.029, 1.31, 1.031, 1.32, 1.032, 1.33, 1.34, 1.035, 1.35, 1.036, 1.36, 1.037, 1.39, 1.039, 1.041, 1.41, 1.42, 1.42f, 1.043, 1.43, 1.44, 1.45, 1.46, 1.47, 1.48, 1.49, 1.101
Timeline
Official Publish:
May 24th, 2001
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.