CVE-1999-0439
HighExploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
Risk Assessment
Attackers can exploit this vulnerability to execute arbitrary commands on the system, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade procmail to version 3.12 or later to mitigate this vulnerability.
Other vulnerabilities in procmail
See all- CVE-2014-3618High
Heap-based buffer overflow in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to 'unbalanced quotes.'
- CVE-2017-16844Critical
A heap-based buffer overflow in the loadbuf function in formisc.c in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message.
- CVE-1999-0475Low
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
Original NVD description (English source)
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.