CVE-1999-0850: The default permissions for Endymion MailMan allow local users to read email or modify files.

Security readout for executives and security teams

Endymion MailMan reportedly shipped with default permissions that could let a local user read email or modify files. The source bundle does not identify affected versions, supported fixes, or current product status, so exposure should be confirmed through asset inventory before prioritizing broad action. Likely limited to hosts running Endymion MailMan with vulnerable default permissions and accessible local user accounts. The bundle does not identify versions or platforms. Prioritize discovery over emergency response. Escalate if Endymion MailMan is still in production, hosts shared local users, or email confidentiality is business-critical. Mitigation focus: Inventory systems for Endymion MailMan installations.; Check vendor or archived advisory guidance before changing permissions.; Audit MailMan directories, mail stores, and configuration file permissions..

Prepared

Jul 12, 2026, 06:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.