metamail vulnerabilities

3 known CVE vulnerabilities in metamail, translated and rated.

CVE-1999-1263Low
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an email message containing a uuencoded attachment that specifies the full pathname of the file to be modified, processed by uuencode in Metamail scripts such as sun-audio-file.
CVE-1999-0365High
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
CVE-1999-0037High
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS