CVE-1999-0057: Eric Allman Vacation

High severity, CVSS 7.5. EPSS: 8.2% chance of exploitation in the next 30 days.

Vacation program allows command execution by remote users through a sendmail command.

Affected products

• Eric Allman Vacation: any version
• Freebsd Freebsd: version 6.2 only
• HP HP-Ux: version 9 only; version 10.00 only; version 10.09 only; version 10.24 only
• HP Vvos: any version
• IBM Aix: any version
• Sun Solaris: any version
• Sun Sunos: any version

Published 1998-11-16. Last modified 2026-06-16.