CVE-1999-0037
HighExploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
Risk Assessment
An attacker can remotely execute commands on the victim's system, potentially leading to system takeover or data leakage.
Recommendation
It is recommended to update the metamail package to the latest version and to limit processing messages from unknown sources.
Other vulnerabilities in metamail
See all- CVE-1999-1263Low
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an email message containing a uuencoded attachment that specifies the full pathname of the file to be modified, processed by uuencode in Metamail scripts such as sun-audio-file.
- CVE-1999-0365High
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
Original NVD description (English source)
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS