PatchTheCVEmetainfo vulnerabilities
Recent CVEs affecting metainfo products. 2 tracked.
metainfo has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 1999-02-04. Highest priority: CVE-1999-0268 (score 63/100).
- CVE-1999-0365 HIGH 7.5 DOWNGRADE DOWNGRADE The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailc
- CVE-1999-0268 HIGH 10.0 MITIGATE MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
FAQ
How do I fix metainfo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is metainfo being exploited right now?
None of the tracked metainfo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which metainfo CVE should I patch first?
CVE-1999-0268 currently ranks highest (63/100): MetaInfo MetaWeb web server allows users to upload, execute, and read scripts..