CVE-1999-0439: Buffer Overflow
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
procmailto a version that resolves this vulnerability.Fixed in 3.12
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0439?
CVE-1999-0439 is considered to have a high severity due to its buffer overflow vulnerability allowing potential remote command execution.
How do I fix CVE-1999-0439?
To fix CVE-1999-0439, upgrade procmail to version 3.12 or later to eliminate the buffer overflow risk.
What software is affected by CVE-1999-0439?
CVE-1999-0439 affects procmail versions prior to 3.12 and SCO OpenLinux Server installations.
Can CVE-1999-0439 be exploited by local attacks?
Yes, CVE-1999-0439 can be exploited by both remote and local attackers due to unrestricted command execution via procmailrc file expansions.
What are the potential impacts of CVE-1999-0439?
The potential impacts of CVE-1999-0439 include unauthorized command execution, which could lead to system compromise and data loss.