Back to CVE Browser

CVE-1999-0754

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1220%

EPSS Percentile7.92th

PublishedMay 11, 1999

Last ModifiedApr 16, 2026

Vulnerability Description

The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.

Affected Platforms (CPE)

📦

Isc

Inn

All versions

References & Advisories

🔗 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-011.0.txt

🔗 http://www.redhat.com/corp/support/errata/inn99_05_22.html

🔗 http://www.securityfocus.com/bid/255

🔗 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-011.0.txt

🔗 http://www.redhat.com/corp/support/errata/inn99_05_22.html

🔗 http://www.securityfocus.com/bid/255

Related Vulnerabilities

CVE-2002-052510.0

Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP serv...

CVE-2021-416629.8

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP...

CVE-2021-414719.8

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execut...

CVE-1999-00439.8

Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.