CVE Catalog
CVE-1999-0872
HighExploitation Probability (EPSS)
Low risk0.36%
28th percentile - higher than 28% of all known CVEs
Summary
Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.
Risk Assessment
An attacker can exploit this vulnerability to gain full system privileges, posing a serious security threat.
Recommendation
It is recommended to limit the length of the MAILTO variable in crontab files and to update Vixie cron to the latest version to minimize risk.
Other vulnerabilities in Vixie cron
See allOriginal NVD description (English source)
Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.