What’s Vulnerable › Vulnerabilities

CVE-1999-0872

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1999-08-25 · updated 2026-06-16

Description

Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.

Affected products

• Caldera Openlinux: 2.2
• Debian Linux: 2.1, 2.2
• Paul Vixie Vixie Cron: 3.0_pl1
• RedHat Linux: 4.0, 4.1, 4.2, 5.0, 5.1, 5.2 (+1)

References

• http://www.securityfocus.com/bid/611
• http://www.securityfocus.com/bid/759
• http://www.securityfocus.com/bid/611
• http://www.securityfocus.com/bid/759

Get alerted when CVE-1999-0872 or the next vulnerability affects your stack