CVE-1999-0971: Buffer Overflow
Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Eximfrom your environment.Uninstall or remove Exim until a vendor security patch or fixed version is available.
- Configuration
Configure Exim to ignore or disallow ':include:' directives in per-user .forward files to prevent exploitation via a long :include: option.
Exim :include: in .forward files = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0971?
CVE-1999-0971 is considered a critical vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-1999-0971?
To fix CVE-1999-0971, upgrade Exim to a version later than 1.62 to mitigate the buffer overflow issue.
Who is affected by CVE-1999-0971?
Local users of Exim versions up to and including 1.62 are affected by CVE-1999-0971.
What type of vulnerability is CVE-1999-0971?
CVE-1999-0971 is a buffer overflow vulnerability that can lead to privilege escalation.
Can CVE-1999-0971 be exploited remotely?
CVE-1999-0971 requires local access for exploitation, as it involves manipulating the .forward file.