Description
Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 1
- DSA-995-1 metamail - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 1015654 vdb-entry
- 18796 third-party-advisory
- SUSE-SR:2006:005 vendor-advisory
- 19226 third-party-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482
- GLSA-200603-16 vendor-advisory
- metamail-boundary-bo(24702) vdb-entry
- MDKSA-2006:047 vendor-advisory
- 18987 third-party-advisory
- 19130 third-party-advisory
- DSA-995 vendor-advisory
- RHSA-2006:0217 vendor-advisory
- 19000 third-party-advisory
- 16611 vdb-entry
- 19304 third-party-advisory
- ADV-2006-0565 vdb-entry