Ritlabs The Bat! up to 1.49 Attachment Warning authentication spoofing

Summaryinfo

A vulnerability has been found in Ritlabs The Bat! up to 1.49 and classified as critical. This vulnerability affects unknown code of the component Attachment Warning Handler. This manipulation causes authentication spoofing. The identification of this vulnerability is CVE-2001-0398. There is no exploit available. This vulnerability is historically significant due to its background and the way it was received. The affected component should be upgraded.

Detailsinfo

A vulnerability has been found in Ritlabs The Bat! up to 1.49 (Mail Client Software) and classified as critical. Affected by this vulnerability is an unknown part of the component Attachment Warning Handler. The manipulation with an unknown input leads to a authentication spoofing vulnerability. The CWE definition for the vulnerability is CWE-290. This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment s type with a different icon.

The weakness was shared 06/18/2001 by http-equiv with malware.com (Website). The advisory is shared at securityfocus.com. This vulnerability is known as CVE-2001-0398. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD at the moment (estimation calculated on 07/04/2014). Due to its background and reception, this vulnerability has a historic impact.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 2530†). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Mail Client Software

Vendor

• Ritlabs

Name

• The Bat!

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34
• 1.35
• 1.36
• 1.37
• 1.38
• 1.39
• 1.40
• 1.41
• 1.42
• 1.43
• 1.44
• 1.45
• 1.46
• 1.47
• 1.48
• 1.49

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion