CVE-1999-0114
CVE-1999-0114 is a medium-severity vulnerability in Elm Development Group Elm with a CVSS 2.0 base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 4.6)
- EPSS exploit prediction: 1% (53rd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Elm Development Group Elm
- Published:
- Last modified:
Description
Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.
Frequently asked questions
- What is CVE-1999-0114?
- Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.
- How severe is CVE-1999-0114?
- CVE-1999-0114 has a CVSS 2.0 base score of 4.6, rated medium severity.
- Is CVE-1999-0114 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (53rd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-1999-0114?
- CVE-1999-0114 affects Elm Development Group Elm. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-1999-0114?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-1999-0114 published?
- CVE-1999-0114 was published on 1998-01-01 and last updated on 2026-06-16.
References
Affected products (1)
- cpe:2.3:a:elm_development_group:elm:2.4:*:*:*:*:*:*:*
More vulnerabilities in Elm Development Group Elm
- CVE-2005-2665 — High (CVSS 7.5): Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote…
- CVE-2003-0966 — High (CVSS 7.5): Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to…
- CVE-2001-1174 — High (CVSS 7.5): Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.
- CVE-1999-1334 — High (CVSS 7.5): Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long…
- CVE-2003-1323 — Medium (CVSS 6.8): Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows…
- CVE-1999-1184 — Medium (CVSS 4.6): Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.