CVE-2001-0473

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-03/0246.htmlPatch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000385
http://marc.info/?l=bugtraq&m=98473109630421&w=2
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-031.php3Patch, Vendor Advisory
http://www.osvdb.org/5615
http://www.redhat.com/support/errata/RHSA-2001-029.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6235
http://archives.neohapsis.com/archives/bugtraq/2001-03/0246.htmlPatch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000385
http://marc.info/?l=bugtraq&m=98473109630421&w=2
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-031.php3Patch, Vendor Advisory
http://www.osvdb.org/5615
http://www.redhat.com/support/errata/RHSA-2001-029.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6235

Timeline

Published: Jun 27, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-04742.1Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmem CVE-2001-04757.5index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote a CVE-2001-04767.5Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands vi CVE-2001-04777.5Vulnerability in WebCalendar 0.9.26 allows remote command execution.CVE-2001-04787.5Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot d CVE-2001-04797.5Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot d CVE-2001-04805.0Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in t CVE-2001-04817.2Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.CVE-2001-04827.2Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or e CVE-2001-04837.5Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources whe CVE-2001-04846.4Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml,CVE-2001-04857.2Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitr