CVE-1999-0971

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Jul 22, 1997
Updated: Nov 20, 2024

Summary

CVE-1999-0971 is a significant vulnerability affecting the Exim email server. This buffer overflow issue allows local users to manipulate the :include: option in a .forward file, leading to a root privilege escalation. An attacker can craft a specially crafted .forward file to exploit this vulnerability, resulting in unauthorized access to sensitive system data or even system takeover. This issue was discovered in 1999 and can pose a serious threat to systems that have not been patched. It is strongly recommended that Exim users apply the available patches to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share