CVE-1999-0872
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Aug 25, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-0872 is a significant vulnerability affecting the Vixie cron daemon. A buffer overflow flaw in the program's handling of MAILTO environment variables in crontab files allows local users to execute arbitrary code with root privileges. By crafting a long MAILTO variable, an attacker can manipulate the cron daemon, potentially leading to unauthorized root access. This vulnerability underscores the importance of keeping system configurations secure and up-to-date to mitigate potential threats.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Red Hat Enterprise Linux
- Debian
Affected Vendors
- Debian
- Red Hat