CVE-2004-0104
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to...
CVE-2004-0104 is a high vulnerability (CVSS 7.5) in Metamail Corporation Metamail, published February 19, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 26.2%, the 98th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 26.2%EPSS, 98th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
metamailDebian:3.0 From an advisory covering 2 CVEs | before 2.7-45woody.2 | 2.7-45woody.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Metamail 2.7 - Multiple Buffer Overflow / Format String Handling Vulnerabilities | 2004-02-18 |
What each source reports
NVD Score used
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
- Record
CVE-2004-0104- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
- Record
CVE-2004-0104- Updated
- 2026-11-02
EUVDEUVD-2004-0104No score
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
- Record
EUVD-2004-0104- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-269x-55hg-8vqhNo score
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to...
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
- Record
GHSA-269x-55hg-8vqh- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/15259
debian.org/security/2004/dsa-449
slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734
ciac.org/ciac/bulletins/o-083.shtml
securityfocus.com/bid/9692
secunia.com/advisories/10908
Show 8 moreShow less
mandriva.com/security/advisories?name=MDKSA-2004:014
redhat.com/support/errata/RHSA-2004-073.html
archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html
kb.cert.org/vuls/id/518518
marc.info?l=bugtraq&m=107713476911429&w=2
nvd.nist.gov/vuln/detail/CVE-2004-0104
github.com/advisories/GHSA-269x-55hg-8vqh