How severe is CVE-2001-1173?

CVE-2001-1173 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2001-1173 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2001-1173?

CVE-2001-1173 primarily affects Masqmail. In total, 30 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2001-1173?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2001-1173 published?

CVE-2001-1173 was published on 2001-07-26 and last updated on 2026-06-16.

CVE-2001-1173

CVE-2001-1173 is a high-severity vulnerability in Masqmail with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.2)
EPSS exploit prediction: 0% (27th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Masqmail
Published: 2001-07-26
Last modified: 2026-06-16

Description

Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.

Frequently asked questions

What is CVE-2001-1173?: Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.
How severe is CVE-2001-1173?: CVE-2001-1173 has a CVSS 2.0 base score of 7.2, rated high severity.
Is CVE-2001-1173 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2001-1173?: CVE-2001-1173 primarily affects Masqmail. In total, 30 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2001-1173?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2001-1173 published?: CVE-2001-1173 was published on 2001-07-26 and last updated on 2026-06-16.

References

ftp://innominate.org/oku/masqmail/ChangeLog-stable

Affected products (30)

cpe:2.3:a:masqmail:masqmail:0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.4:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.5:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.6:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.7:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.8:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.9:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.10:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.11:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.12:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.0.13:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.2:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.3:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.4:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.6:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.7:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.8:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.9:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.10:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.11:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.12:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.13:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.14:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.15:*:*:*:*:*:*:*

More vulnerabilities in Masqmail

CVE-2005-2662 — High (CVSS 7.5): masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not…
CVE-2002-1279 — High (CVSS 7.2): Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to…
CVE-2005-2663 — Low (CVSS 2.1): masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.

All CVEs affecting Masqmail →