The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Metaip |
Metainfo |
3.1 |
3.1 |
Sendmail |
Metainfo |
2.0 |
2.0 |
Sendmail |
Metainfo |
2.5 |
2.5 |
References