CVE-1999-0409: Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.

Security readout for executives and security teams

CVE-1999-0409 describes a local buffer overflow in gnuplot version 3.5 on Linux. A local user could reportedly gain root access. The bundle does not provide CVSS, detailed affected-package metadata, patch names, or active exploitation evidence. Exposure is most likely limited to legacy Linux systems that still have gnuplot 3.5 installed and accessible to local users. Modern systems are unlikely to run this version, but asset verification is required. Treat as high priority only if legacy Linux systems with gnuplot 3.5 remain in use. The business risk is local privilege escalation to root, but evidence is old and affected metadata is sparse. Mitigation focus: Inventory Linux hosts for installed gnuplot version 3.5.; Remove gnuplot 3.5 where it is not required.; Upgrade gnuplot through supported distribution or vendor packages..

Prepared

Jul 12, 2026, 06:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.