← Vulnerability feed

Vulnerability record · CVE-1999-0971 · published 22 July 1997

CVE-1999-0971: University of cambridge exim vulnerability

University Of Cambridge · Exim

Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.

7.2 CVSS 2.0 High EPSS 0.69% · top 49.2%
7.2CVSS 2.0 base score
0.69%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/archive/1/7301
http://www.securityfocus.com/archive/1/7301

Track CVE-1999-0971 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-0399University of cambridge exim vulnerabilityStack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a deni…EPSS 21%7.5CVE-2004-0400University of cambridge exim vulnerabilityStack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of serv…EPSS 7.0%7.5CVE-2003-0743University of cambridge exim vulnerabilityHeap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary…EPSS 5.7%7.5CVE-2001-0889University of cambridge exim vulnerabilityExim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which co…EPSS 6.4%7.5CVE-2001-0690University of cambridge exim vulnerabilityFormat string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execu…EPSS 12%7.2CVE-2005-0021University of cambridge exim vulnerabilityMultiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as d…EPSS 2.6%7.2CVE-2002-1381University of cambridge exim vulnerabilityFormat string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code b…EPSS 2.3%4.6CVE-2005-0022University of cambridge exim vulnerabilityBuffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client …EPSS 0.72%

Source: NIST National Vulnerability Database (record CVE-1999-0971), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.