CVE-1999-1266: Metamail Corporation Metamail

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system.

Affected products

• Metamail Corporation Metamail: up to and including 7.2

Published 1997-06-13. Last modified 2026-06-16.