VULNERABILITY INTELLIGENCE
CVE-2001-0398
CVSS score7.5 HIGH
EPSS probability2.04%
CISA KEVNot currently listed
Published2001-06-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon.
Primary references
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory