CVE-1999-0906: Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.

Security readout for executives and security teams

This old CVE describes a local privilege escalation in sccw. A user who already has local access may be able to abuse the HOME environment variable to trigger a buffer overflow and gain root privileges. The sources do not identify a vendor, affected versions, patch, or active exploitation. Exposure is limited to systems that have the vulnerable sccw component installed and accessible to local users. The provided sources do not identify products, platforms, or versions, so inventory validation is required. Treat as high priority only where sccw is present on multi-user or legacy systems. Business urgency is otherwise unknown because product and version evidence is incomplete. Mitigation focus: Inventory systems for any installed or deployed sccw component.; Check vendor or platform guidance for fixed versions or retirement advice.; Limit interactive local access on systems where sccw exists..

Prepared

Jul 12, 2026, 06:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.