CVE-1999-0297: Bsdi Bsd OS

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.

Affected products

• Bsdi Bsd OS: version 2.1 only
• Freebsd Freebsd: version 2.1.0 only
• Netbsd Netbsd: version 2.0.4 only
• Paul Vixie Vixie Cron: version 3.0 only
• Red Hat Linux: any version

Published 1996-12-12. Last modified 2026-06-16.