CVE-2004-0104: metamail_corporation metamail

EPSS trend

Probability

26.22%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 26.22% on 19-09-2026

19-09-202619-10-2026

EPSS score

26.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotelinuxVerified
Metamail 2.7 - Multiple Buffer Overflow / Format String Handling Vulnerabilities
Maturity: weaponized

References

12 links

exchange.xforce.ibmcloud.com/vulnerabilities/15259VDB EntryX Refsource XF
www.debian.org/security/2004/dsa-449Vendor AdvisoryX Refsource DEBIAN
www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734Vendor AdvisoryX Refsource SLACKWARE
www.ciac.org/ciac/bulletins/o-083.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC
www.securityfocus.com/bid/9692VDB EntryX Refsource BIDExploitPatchVendor Advisory
secunia.com/advisories/10908Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2004:014Vendor AdvisoryX Refsource MANDRAKE
exchange.xforce.ibmcloud.com/vulnerabilities/15245VDB EntryX Refsource XF
www.redhat.com/support/errata/RHSA-2004-073.htmlVendor AdvisoryX Refsource REDHATPatch
archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.htmlMailing ListX Refsource VULNWATCH

Show all 12 references

www.kb.cert.org/vuls/id/518518Third Party AdvisoryX Refsource CERT VNUS Government Resource
marc.info?l=bugtraq&m=107713476911429&w=2Mailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2018-16850alpinepostgresql+395.15%7y ago13-11-2018 15:00postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.CVE-2018-16395alpineruby+2610.71%7y ago16-11-2018 18:00An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.CVE-2018-16396alpineruby+247.97%7y ago16-11-2018 18:00An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.CVE-2018-16866chainguardpy3-systemd+271.05%7y ago11-01-2019 19:00An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.CVE-2018-1283apache software foundationapache http server+119.74%8y ago26-03-2018 15:00In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a "Session" header. This comes from the "HTTP_SESSION" variable name used by mod_session to forward its data to CGIs, since the prefix "HTTP_" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

All vulnerabilities inmetamail enterprise_linux linux_advanced_workstation propack

CVE-2004-0104: metamail_corporation metamail

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References