CVE-1999-0475: Race Condition
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Red Hat Procmailfrom your environment.If Procmail is not required, uninstall/remove the Red Hat Procmail package to eliminate the vulnerable component and prevent local users from exploiting the race condition to read arbitrary files.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0475?
The severity of CVE-1999-0475 is generally considered to be medium due to the potential for local users to read sensitive files.
How do I fix CVE-1999-0475?
To fix CVE-1999-0475, ensure that appropriate file permissions are set on .procmailrc files and consider updating to the latest version of procmail.
Who is affected by CVE-1999-0475?
CVE-1999-0475 affects local users running procmail who can access the .procmailrc file.
What type of vulnerability is CVE-1999-0475?
CVE-1999-0475 is classified as a race condition vulnerability.
What can an attacker do with CVE-1999-0475?
An attacker can exploit CVE-1999-0475 to read arbitrary files that are accessible to the user executing procmail.