CVE-1999-0365
HighExploitation Probability (EPSS)
High risk89th percentile - higher than 89% of all known CVEs
Summary
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system and execution of arbitrary commands by an attacker.
Recommendation
It is recommended to update the metamail package and review mailcap entries to ensure that all metacharacters are properly quoted.
Other vulnerabilities in metamail
See all- CVE-1999-1263Low
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an email message containing a uuencoded attachment that specifies the full pathname of the file to be modified, processed by uuencode in Metamail scripts such as sun-audio-file.
- CVE-1999-0037High
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
Original NVD description (English source)
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS