CVE-1999-1263

Low

Published: 15/08/2003(UTC)Updated: 25/09/2026(UTC)Translated: 26/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.98%

61th percentile - higher than 61% of all known CVEs

Summary

Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an email message containing a uuencoded attachment that specifies the full pathname of the file to be modified, processed by uuencode in Metamail scripts such as sun-audio-file.

Risk Assessment

An attacker can overwrite arbitrary files on the victim's system, potentially leading to data corruption or system compromise.

Recommendation

Upgrade Metamail to version 2.7-7.2 or later. Consider disabling processing of uuencoded attachments in Metamail scripts.

Other vulnerabilities in Metamail

See all

Original NVD description (English source)

Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS