CVE Catalog
CVE-1999-0769
HighExploitation Probability (EPSS)
Elevated risk0.80%
52th percentile - higher than 52% of all known CVEs
Summary
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
Risk Assessment
The ability for local users to manipulate sendmail parameters may lead to unauthorized access to the system or information leakage.
Recommendation
It is recommended to restrict access to the MAILTO variable and monitor user activity on the system.
Other vulnerabilities in Vixie Cron
See allOriginal NVD description (English source)
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.