CVE-1999-1512: Amavis Virus Scanner

High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days.

The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.

Affected products

• Amavis Virus Scanner: up to and including 0.2_pre4

Published 1999-12-31. Last modified 2026-06-16.