Vulnerability in Metamail Corporation

CVE-1999-1263

Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file.

EPSS: 0.010 (58.5th percentile) — read the EPSS interpretation.

Affected products

References