Metamail Multiple Vulnerabilities

Bugtraq ID:	8429
Class:	Unknown
CVE:	CVE-1999-0037
Remote:	Yes
Local:	No
Published:	May 21 1997 12:00AM
Updated:	May 21 1997 12:00AM
Credit:	The original discoverer of these issues is currently unknown.
Vulnerable:	Metamail Metamail 2.7 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + FreeBSD FreeBSD 2.2.2 + Redhat Linux 4.2 + SCO Open UNIX 8.0 + SCO Unixware 7.1.3 + SCO Unixware 7.1.2 + SCO Unixware 7.1.1 + Slackware Linux 9.1 + Slackware Linux 9.0 + Slackware Linux 8.0 + Slackware Linux -current
Not Vulnerable:

Metamail Multiple Vulnerabilities

Multiple vulnerabilities exist in Metamail. These issues could result in file corruption, execution of shell commands or execution of arbitrary code.

Metamail Multiple Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Metamail Multiple Vulnerabilities

Solution:
BSDI has released fixes. Please contact the vendor for further details.

FreeBSD corrected this issue in the Metamail port as of May 21, 1997.

HP has released fixes for HP-UX operating systems. Please contact the vendor for further details.

Red Hat has released fix RPMs for Red Hat 4.2. Please contact the vendor for further details.

SCO has released fixes for UnixWare and Open UNIX.


Metamail Metamail 2.7

• SCO erg712265.Z
  UnixWare 7.1.3, Open UNIX 8.0.0, UnixWare 7.1.2, UnixWare 7.1.1
  ftp://ftp.caldera.com/pub/updates/UnixWare/CSSA-2003-SCO.15

Metamail Multiple Vulnerabilities

References:

• CERT Advisory CA-1997-14 Vulnerability in metamail (CERT/CC)