CVE-1999-0475
LowExploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
Risk Assessment
This vulnerability may lead to unauthorized access to sensitive user data, posing a significant security threat to the system.
Recommendation
It is recommended to restrict access to .procmailrc files and update procmail to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in procmail
See all- CVE-2014-3618High
Heap-based buffer overflow in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to 'unbalanced quotes.'
- CVE-2017-16844Critical
A heap-based buffer overflow in the loadbuf function in formisc.c in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message.
- CVE-1999-0439High
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
Original NVD description (English source)
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS