PT-2004-1301 · Metamail · Metamail

Ulf Härnhammar · Published 2004-02-19 · Updated 2017-07-11 · CVE-2004-0104

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Metamail versions 2.7 and earlier

Description The issue concerns multiple format string vulnerabilities that allow remote attackers to execute arbitrary code.

Recommendations For Metamail versions 2.7 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-0104

DSA-449

Affected Products

Metamail

References · 14

• 🔥 http://securityfocus.com/bid/9692 · Exploit
• 🔥 https://exploit-db.com/exploits/23728 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0104 · Security Note
• http://redhat.com/support/errata/RHSA-2004-073.html · Vendor Advisory
• http://debian.org/security/2004/dsa-449 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2004:014 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15259 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html · Note
• http://secunia.com/advisories/10908 · Note
• http://ciac.org/ciac/bulletins/o-083.shtml · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15245 · Note
• http://kb.cert.org/vuls/id/518518 · Note
• http://marc.info/?l=bugtraq&m=107713476911429&w=2 · Note