CVE-1999-1512

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=93219846414732&w=2
http://www.amavis.org/ChangeLog.txtVendor Advisory
http://www.securityfocus.com/bid/527Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/2349
http://marc.info/?l=bugtraq&m=93219846414732&w=2
http://www.amavis.org/ChangeLog.txtVendor Advisory
http://www.securityfocus.com/bid/527Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/2349

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-15137.5Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.CVE-1999-15147.5Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary com CVE-1999-15155.0A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender an CVE-1999-15167.5A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary cod CVE-1999-15177.2runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrit CVE-1999-15185.0Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory lim CVE-1999-15195.0Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password CVE-1999-15205.0A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC CVE-1999-152110.0Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a re CVE-1999-15225.0Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.CVE-1999-15237.5Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, vi CVE-1999-15245.0FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and c