CVE-1999-1140

Summary

CVE-1999-1140 is a vulnerability affecting CrackLib version 2.5. This issue involves a buffer overflow in the program's handling of the GECOS field, which is part of a user's account information. If a user supplies a maliciously crafted long GECOS field, they may be able to exploit this flaw and gain root privileges, allowing them to take full control of the affected system. This vulnerability poses a significant risk to local users and highlights the importance of keeping software up-to-date with security patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.