CVE-1999-0129

CVSS 2.0 Score 4.6 of 10 (medium)

Details

Published Dec 3, 1996
Updated: Nov 20, 2024

Summary

CVE-1999-0129 is a vulnerability affecting Sendmail, an email transfer agent. Maliciously crafted .forward or :include: files can be used by local users to write to arbitrary files, potentially gaining group permissions beyond their intended access level. This issue poses a significant security risk if exploited, as it allows unauthorized modification of files and escalation of privileges. It is recommended that affected systems be updated with the latest Sendmail patches to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SunOS
  • HP-UX family of operating systems
  • IBM AIX
  • FreeBSD

Affected Vendors

  • IBM Corporation
  • Oracle Corp
  • FreeBSD Project
  • HP