CVE-1999-0123: Race Condition
Race condition in Linux mailx command allows local users to read user files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
slackware/mailxfrom your environment.Uninstall the mailx package from affected systems if it is not required.
- Compensating control
Restrict local user access and privileges: disable or remove untrusted local accounts and enforce least privilege to prevent untrusted local users from reading other users' files.
- Operational
Audit for potential exposure: review local access logs and file access timestamps for signs that user files were read via mailx; assume possible exposure of any exposed files and remediate (restore from safe backups, notify affected users) as appropriate.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0123?
CVE-1999-0123 is considered to have a moderate severity level due to its potential to allow local users to read sensitive files.
How do I fix CVE-1999-0123?
To fix CVE-1999-0123, it's recommended to update the Linux mailx command to a version that does not have this race condition vulnerability.
Who is affected by CVE-1999-0123?
CVE-1999-0123 affects local users on systems running Slackware Linux version 3.0.
What type of vulnerability is CVE-1999-0123?
CVE-1999-0123 is a race condition vulnerability that can be exploited by local users.
Is CVE-1999-0123 still a concern today?
While CVE-1999-0123 is an older vulnerability, it can still pose a risk on legacy systems that have not been patched.