CVE-1999-0037: Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail

Unscored severity · published May 21, 1997

CVE-1999-0037

Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail

–

CVSS

3.5%

EPSS

On KEV

Description

Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.

Exploitation

Is it being used?

Exploit prediction (EPSS)3.5% · higher than 89% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

6.2 · source: NVD

All versions, or not specified · source: NVD

Affected product

Freebsd

References