Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200405-17] Multiple vulnerabilities in metamail Vulnerability Scan
Vulnerability Scan Summary
Multiple vulnerabilities in metamail
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200405-17
(Multiple vulnerabilities in metamail)
Ulf Harnhammar found two format string bugs and two buffer overflow bugs in
A remote attacker could send a malicious email message and execute
arbitrary code with the rights of the process calling the Metamail program.
There is no known workaround at this time.
All users of Metamail should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-mail/metamail-18.104.22.168"
# emerge ">=net-mail/metamail-22.214.171.124"
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.