← All advisories

Unrated severityNVD Advisory· Published Dec 12, 1996· Updated Jun 16, 2026

CVE-1999-0297

CVE-1999-0297

Description

Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.

Affected products

6

Paul Vixie/Vixie Cron
cpe:2.3:a:paul_vixie:vixie_cron:3.0:*:*:*:*:*:*:*
Bsdi/BSD OS
cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*
FreeBSD/FreeBSD
cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*
NetBSD/NetBSD
cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*
Red Hat/Linux
cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*
Vixie/Cronllm-fuzzy
Range: <=3.0

Patches

Vulnerability mechanics

References

1

exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0297nvd

News mentions

0

No linked articles in our index yet.