CVE-1999-0475

Summary

CVE-1999-0475 is a race condition vulnerability affecting the handling of .procmailrc files in the procmail mail filtering utility. This issue permits a local user to access arbitrary files, depending on the user running procmail. The vulnerability arises due to a timing mismatch during the processing of these files, allowing the attacker to read files outside of their intended access scope. Exploitation of this vulnerability could lead to the disclosure of sensitive information. It is recommended to apply the available patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.