CVE-2006-0709
https://notcve.org/view.php?id=CVE-2006-0709
Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482 http://secunia.com/advisories/18796 http://secunia.com/advisories/18987 http://secunia.com/advisories/19000 http://secunia.com/advisories/19130 http://secunia.com/advisories/19226 http://secunia.com/advisories/19304 http://securitytracker.com/id?1015654 http://www.debian.org/security/2006/dsa-995 http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml http://www.novell.com/linux/security/advisories/2006_05_sr •
CVE-2004-1808
https://notcve.org/view.php?id=CVE-2004-1808
Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack. • http://marc.info/?l=bugtraq&m=107910934926062&w=2 http://www.securityfocus.com/bid/9850 https://exchange.xforce.ibmcloud.com/vulnerabilities/15460 •
CVE-2004-0105
https://notcve.org/view.php?id=CVE-2004-0105
Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code. Múltiples desbordamientos de búfe en Metamail 2.7 y anteriores permiten a atacantes remtos ejecutar código arbitrario. • http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html http://marc.info/?l=bugtraq&m=107713476911429&w=2 http://secunia.com/advisories/10908 http://www.ciac.org/ciac/bulletins/o-083.shtml http://www.debian.org/security/2004/dsa-449 http://www.kb.cert.org/vuls/id/513062 http://www.mandriva.com/security/advisories?name=MDKSA-2004:014 http://www.redhat.com/support/errata/RHSA-2004-073.html http://www.securityfocus.com/bid/9692 http://www.slackware. •
CVE-2004-0104 – Metamail 2.7 - Multiple Buffer Overflow / Format String Handling Vulnerabilities
https://notcve.org/view.php?id=CVE-2004-0104
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code. Múltiples vulnerabilidades de cadena de formato en Metamail 2.7 y anteriores permiten a atacantes remotos ejecutar código arbitrario. • https://www.exploit-db.com/exploits/23728 http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html http://marc.info/?l=bugtraq&m=107713476911429&w=2 http://secunia.com/advisories/10908 http://www.ciac.org/ciac/bulletins/o-083.shtml http://www.debian.org/security/2004/dsa-449 http://www.kb.cert.org/vuls/id/518518 http://www.mandriva.com/security/advisories?name=MDKSA-2004:014 http://www.redhat.com/support/errata/RHSA-2004-073.html http://www.securi •
CVE-1999-1263
https://notcve.org/view.php?id=CVE-1999-1263
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file. • http://marc.info/?l=bugtraq&m=87773365324657&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/1677 •