debian/mpack vulnerabilities

Latest debian/mpack CVEs

Newest publication first

1. CVE-2011-4919 mpack 1.6 has information disclosure via eavesdropping on mails sent by other users

   Published 2019-11-19

   High·CVSS 7.5 EPSS 2.6%

   mpack 1.6 has information disclosure via eavesdropping on mails sent by other users

2. CVE-2002-1425 Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.

   Published 2004-09-01

   Medium·CVSS 6.4 EPSS 1.9%

   Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.

3. CVE-2002-1424 Buffer overflow in munpack in mpack 1.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.

   Published 2004-09-01

   Medium·CVSS 5.0 EPSS 4.0%

   Buffer overflow in munpack in mpack 1.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.

4. DSA-141 mpack - buffer overflow

   Published 2002-08-01

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.