CVE Catalog
CVE-1999-0114
MediumExploitation Probability (EPSS)
Elevated risk0.82%
52th percentile - higher than 52% of all known CVEs
Summary
Local users can execute commands as other users and read other users' files through a symlink attack in the Elm elm-2.4 mail package.
Risk Assessment
An attacker may gain access to sensitive data and perform unauthorized operations on the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update the Elm package to the latest version and restrict access to the filter command only to trusted users.
Original NVD description (English source)
Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.