diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 7b989d6a0424..bacbe3190c53 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -32,6 +32,34 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
   "http://www.vuxml.org/dtd/vuxml-1/vuxml-10.dtd">
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
 
+  <vuln vid="a20082c3-6255-11d8-80e3-0020ed76ef5a">
+    <topic></topic>
+    <affects>
+      <package>
+	<name>metamail</name>
+	<range><lt>2.7_1</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>Ulf Härnhammar reported four bugs in metamail: two are format
+	  string bugs and two are buffer overflows.  The bugs are in
+	  SaveSquirrelFile(), PrintHeader(), and ShareThisHeader().</p>
+	<p>These vulnerabilities could be triggered by a maliciously
+	  formatted email message if `metamail' or `splitmail' is used
+	  to process it, possibly resulting in arbitrary code execution
+	  with the privileges of the user reading mail.</p>
+      </body>
+    </description>
+    <references>
+      <cvename>CAN-2004-0104</cvename>
+      <cvename>CAN-2004-0105</cvename>
+    </references>
+    <dates>
+      <discovery>2004-02-18</discovery>
+      <entry>2004-02-18</entry>
+    </dates>
+  </vuln>
   <vuln vid="87cc48fd-5fdd-11d8-80e3-0020ed76ef5a">
     <topic>mnGoSearch buffer overflow in UdmDocToTextBuf()</topic>
     <affects>
