CVE-1999-0439

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Apr 5, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-04407.5The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.CVE-1999-04415.0Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.CVE-1999-04422.1Solaris ff.core allows local users to modify files.CVE-1999-044310.0Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.CVE-1999-04445.0Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each pacCVE-1999-04455.0In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.CVE-1999-04462.1Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, tCVE-1999-04474.6Local users can gain privileges using the debug utility in the MPE/iX operating system.CVE-1999-04485.0IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really requestCVE-1999-04497.8The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advseaCVE-1999-04507.5In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).CVE-1999-04512.1Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.