CVE-1999-0297

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Dec 12, 1996
Updated: Nov 20, 2024

Summary

CVE-1999-0297 is a buffer overflow vulnerability affecting the Vixie Cron library up to version 3.0. This issue allows local users to exploit the vulnerability by setting a long environmental variable, causing the buffer to overflow and potentially granting root access. An attacker can leverage this vulnerability to bypass user restrictions and gain elevated privileges on the system. This vulnerability highlights the importance of keeping software up-to-date to mitigate known security risks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Red Hat Enterprise Linux
  • NetBSD
  • FreeBSD

Affected Vendors

  • Red Hat
  • Netbsd
  • FreeBSD Project