CVE-2003-1133
CVE-2003-1133 is a low-severity vulnerability in Ritlabs The Bat with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Low (CVSS 2.0 base score 2.1)
- EPSS exploit prediction: 0% (36th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Ritlabs The Bat
- Published:
- Last modified:
Description
Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email messages.
Frequently asked questions
- What is CVE-2003-1133?
- Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email messages.
- How severe is CVE-2003-1133?
- CVE-2003-1133 has a CVSS 2.0 base score of 2.1, rated low severity.
- Is CVE-2003-1133 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2003-1133?
- CVE-2003-1133 primarily affects Ritlabs The Bat. In total, 44 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2003-1133?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2003-1133 published?
- CVE-2003-1133 was published on 2003-12-31 and last updated on 2026-06-16.
References
- http://securitytracker.com/id?1008004
- http://www.securityfocus.com/archive/1/342485
- http://www.securityfocus.com/bid/8891
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13527
Affected products (44)
- cpe:2.3:a:ritlabs:the_bat:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.011:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.14:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.15:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.015:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.17:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.18:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.19:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.21:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.22:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.028:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.029:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.31:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.031:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.32:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.032:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.33:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.34:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.035:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.35:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.036:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.36:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.037:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.39:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.039:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.041:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.41:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.42:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.42f:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.043:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.43:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.44:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.45:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.46:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.47:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.48:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.49:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.51:*:*:*:*:*:*:*
- cpe:2.3:a:ritlabs:the_bat:1.52:*:*:*:*:*:*:*
More vulnerabilities in Ritlabs The Bat
- CVE-2006-0918 — High (CVSS 7.5): Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via a long Subject field.
- CVE-2001-0398 — High (CVSS 7.5): The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary…
- CVE-2017-17689 — Medium (CVSS 5.9): The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to…
- CVE-2006-0630 — Medium (CVSS 5.0): RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME…
- CVE-2002-0338 — Medium (CVSS 5.0): The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash)…
- CVE-2001-0676 — Medium (CVSS 5.0): Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create…