CVE-1999-1409: Netbsd

Low severity, CVSS 2.1. EPSS: 1% chance of exploitation in the next 30 days.

The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.

Affected products

• Netbsd Netbsd: up to and including 1.3.2; version 1.0 only; version 1.1 only; version 1.2 only; version 1.2.1 only; version 1.3 only; …
• Sgi Irix: version 6.2 only; version 6.4 only; version 6.5 only; version 6.5.1 only

Published 1998-07-03. Last modified 2026-06-16.