CVE-2004-1808: Low severity Metamail Corporation Metamail vulnerability
Published Dec 31, 2004
·Updated
Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack.
Affected Software
1 affected component
Metamail Corporation Metamail=2.7
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1808?
The severity of CVE-2004-1808 is considered medium due to its potential impact on local users allowing them to overwrite arbitrary files.
2
How do I fix CVE-2004-1808?
To fix CVE-2004-1808, ensure that you update to a version of Metamail where the output file verification has been implemented.
3
Who is affected by CVE-2004-1808?
Local users running Metamail version 2.7 are affected by CVE-2004-1808.
4
What type of attack is associated with CVE-2004-1808?
CVE-2004-1808 is associated with a symlink attack that can lead to file overwriting.
5
Is CVE-2004-1808 still relevant today?
While CVE-2004-1808 pertains to older software, it is still relevant for systems that have not been updated or patched.