CVE-2006-0709

Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105...

CVE-2006-0709

CVE-2006-0709 targets Metamail, reporting a buffer overflow when processing MIME boundaries that could lead to DoS or arbitrary code execution. Connected advisories confirm remote exploitation and provide fixes: Debian DSA-995-1 and 0F4EA (metamail upgrades to patched revisions), Gentoo GLSA-2006...

Slackware 8.1 / 9.0 / 9.1 / current : metamail security update (SSA:2004-049-02)

Metamail is a set of utilities for processing MIME mail. New metamail packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix two format string bugs and two buffer overflows which could lead to unauthorized code execution. Thanks to Ulf Hrnhammar for discovering these problems...

CVE-2004-1808

The CVE-2004-1808 issue concerns Extcompose in metamail, where the tool does not verify the output file before writing, permitting a local user to overwrite arbitrary files via a symlink attack. Affected component: Extcompose/m metamail (exact version not specified in provided documents). Root ca...

CVE-2004-1808

Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-1808

Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack...

Debian DSA-449-1 : metamail - buffer overflow, format string bugs

Ulf Harnhammar discovered two format string bugs CAN-2004-0104 and two buffer overflow bugs CAN-2004-0105 in metamail, an implementation of MIME. An attacker could create a carefully-crafted mail message which will execute arbitrary code as the victim when it is opened and parsed through metamail...

GLSA-200405-17 : Multiple vulnerabilities in metamail

The remote host is affected by the vulnerability described in GLSA-200405-17 Multiple vulnerabilities in metamail Ulf Harnhammar found two format string bugs and two buffer overflow bugs in Metamail. Impact : A remote attacker could send a malicious email message and execute arbitrary code with t...

Mandrake Linux Security Advisory : metamail (MDKSA-2004:014)

Two format string and two buffer overflow vulnerabilities were discovered in metamail by Ulf Harnhammar. The updated packages are patched to fix these holes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake...

FreeBSD : metamail format string bugs and buffer overflows (108)

The following package needs to be updated: metamail %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga20082c3625511d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : metamail (RHSA-2004:073)

Updated metamail packages that fix a number of vulnerabilities are now available. Metamail is a system for handling multimedia mail. Ulf Harnhammar discovered two format string bugs and two buffer overflow bugs in versions of Metamail up to and including 2.7. An attacker could create a...

[Full-Disclosure] [ GLSA 200405-17 ] Multiple vulnerabilities in metamail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200405-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

Multiple MetaMail bugs

Multiple format string bugs and buffer overflow...

Multiple vulnerabilities in metamail

Background Metamail is a program that decodes MIME encoded mail. It is therefore often automatically called when an email is received or read. Description Ulf Harnhammar found two format string bugs and two buffer overflow bugs in Metamail. Impact A remote attacker could send a malicious email...

Metamail symlink problem

Symlink problem in extcompose script...

Metamail 'extcompose' script Symlink Vulnerability

Product: Extcompose included with the common metamail package. http://bmrc.berkeley.edu/trey/emacs/metamail.html Versions: All Bug: Symlink bug / race condition Impact: Attacker's can write to arbitrary files, and in theory, elevate privileges Date: March 11, 2004 Author: Shaun Colley Email:...

CVE-2004-0105

Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code...

CVE-2004-0104

Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code...

CVE-2004-0104

Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code...

CVE-2004-0105

Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code...