CVE Catalog
CVE-1999-0037
HighExploitation Probability (EPSS)
High risk3.51%
88th percentile - higher than 88% of all known CVEs
Summary
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
Risk Assessment
An attacker can remotely execute commands on the victim's system, potentially leading to system takeover or data leakage.
Recommendation
It is recommended to update the metamail package to the latest version and to limit processing messages from unknown sources.
Other vulnerabilities in metamail
Original NVD description (English source)
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.