CVEvulnerability

CVE-1999-1263

2.6 LOW Published 2003-08-15 Modified 2026-09-25 Official page ↗
Status
Modified
Published
2003-08-15
Last modified
2026-09-25
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N

Description

Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file.

Affected configurations

• metamail corporation metamail (<= 2.7)

Related

Referenced by CWE · observed example (2)

  • CWE-36 Absolute Path Traversal weakness
  • CWE-38 Path Traversal: '\absolute\pathname\here' weakness

References