Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Metamail 安全漏洞
Vulnerability Description
Metamail是MIME的实现的邮件系统。Metamail存在安全漏洞,可导致攻击者进行文件破坏,任意SHELL命令执行或者任意指令执行攻击。Metamail使用可配置文件"mailcap"文件根据邮件头描述的内容来判断是否阻挡邮件。Metamail存在多个漏洞,描述如下:CVE-1999-1263:Metamail允许远程攻击者通过发送EMAIL消息中包含指定完全路径的uuencoded编码附件来覆盖系统任意文件, 这操作会有由Metamail脚本如sun-audio-file等处理。CVE-1999
CVSS Information
N/A
Vulnerability Type
N/A