high7.2Public exploit code
CVE-1999-0769
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Caldera OpenLinux 2.2 / Debian 2.1/2.2 / RedHat 6.0 - Vixie Cron MAILTO Sendmail1999-08-25 · local · linux · Verified
Impact
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paul Vixie | Vixie Cron | Version 3.0_pl1 |
| Caldera | Openlinux | Version 2.2 |
| Debian | Debian Linux | Versions 2.1, 2.2 |
| Redhat | Linux | Versions 4.0, 4.1, 4.2, 5.0, 5.1, 5.2 |