Vulnerability Description
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Procmail | Procmail | <= 3.12 |
| Caldera | Openlinux | All versions |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0439
- https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0439
FAQ
What is CVE-1999-0439?
CVE-1999-0439 is a vulnerability with a CVSS score of 7.5 (HIGH). Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
How severe is CVE-1999-0439?
CVE-1999-0439 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-0439?
Check the references section above for vendor advisories and patch information. Affected products include: Procmail Procmail, Caldera Openlinux.