← Vulnerability feed

Vulnerability record · CVE-1999-1415 · published 23 August 1991

CVE-1999-1415: Digital ultrix vulnerability

DDigital · Ultrix

Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges.

4.6 CVSS 2.0 Medium EPSS 0.32% · top 77.2%
4.6CVSS 2.0 base score
0.32%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/27
http://www.cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/27

Track CVE-1999-1415 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-1999-0046rlogin buffer overflow via TERM environment variableThe rlogin program contains a classic buffer overflow (CWE-120) triggered through the TERM environment variable. Because rlogin is a network login se…EPSS 52%analysed10.0CVE-1999-1032Digital ultrix vulnerabilityVulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges.EPSS 2.4%7.5CVE-1999-0170Digital ultrix vulnerabilityRemote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.EPSS 19%7.2CVE-2002-1128Digital osf 1 vulnerabilityBuffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable.EPSS 0.46%7.2CVE-1999-1194Digital ultrix vulnerabilitychroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.EPSS 0.96%5.0CVE-1999-1225Digital ultrix vulnerabilityrpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by atte…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-1999-1415), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.