Mandrake Linux Security Advisory : metamail (MDKSA-2006:047)
High Nessus Plugin ID 20981
SynopsisThe remote Mandrake Linux host is missing a security update.
DescriptionUlf Harnhammar discovered a buffer overflow vulnerability in the way that metamail handles certain mail messages. An attacker could create a carefully-crafted message that, when parsed via metamail, could execute arbitrary code with the privileges of the user running metamail.
The updated packages have been patched to address this issue.
SolutionUpdate the affected metamail package.