CVE-2004-0105: Buffer Overflow
Published Feb 19, 2004
·Updated
Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
Affected Software
7 affected components
SGI ProPack=2.3
Metamail Corporation Metamail<=2.7
SGI ProPack=2.4
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Linux Advanced Workstation=2.1
redhat Enterprise Linux=2.1
Remediation
Patch Available
Event History
Feb 19, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0105?
CVE-2004-0105 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2004-0105?
To fix CVE-2004-0105, upgrade Metamail to version 2.8 or later where the buffer overflow vulnerabilities have been addressed.
3
Which software versions are affected by CVE-2004-0105?
CVE-2004-0105 affects Metamail versions up to and including 2.7, as well as specific versions of SGI ProPack and Red Hat Enterprise Linux.
4
What types of attacks can exploit CVE-2004-0105?
Attackers can exploit CVE-2004-0105 through crafted email messages which trigger buffer overflows, potentially allowing arbitrary code execution.
5
Is there a workaround for CVE-2004-0105?
As a workaround for CVE-2004-0105, users can disable the execution of Metamail or avoid using it until an update is applied.