CVE-1999-0341: Buffer Overflow
Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
deliverfrom your environment.Uninstall the affected 'deliver' mail program from Debian/Slackware systems if it is not required.
- Configuration
Prevent local users from executing the 'deliver' binary by removing execute permissions for non-root users or restricting execution to a trusted administrative group (for example, as root: determine the path to the deliver binary and run chown root:mail /path/to/deliver && chmod 750 /path/to/deliver).
deliver executable_permission = disabled for non-root users
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0341?
CVE-1999-0341 is considered a high severity vulnerability due to the potential for local users to gain root access.
How do I fix CVE-1999-0341?
To fix CVE-1999-0341, update the Linux mail program 'deliver' to a version that has patched the buffer overflow vulnerability.
Who is affected by CVE-1999-0341?
CVE-1999-0341 affects local users on Debian Linux 1.3.1 and Slackware Linux versions 2.1, 2.2, and 2.3.
What type of vulnerability is CVE-1999-0341?
CVE-1999-0341 is classified as a buffer overflow vulnerability.
Can CVE-1999-0341 be exploited remotely?
No, CVE-1999-0341 can only be exploited by local users on the affected systems.