CVE-1999-1334: Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (...

Security readout for executives and security teams

CVE-1999-1334 is a legacy Elm 2.4 mail-filtering flaw. Specially long email headers or a long filterfile argument can overflow buffers in the filter command and may let an attacker run commands on the affected system. The practical risk is mainly older Unix/Linux systems still using Elm filter. Exposure is likely limited to legacy hosts where Elm 2.4 filter is installed and processes untrusted mail or user-controlled filterfile arguments. Modern environments are unlikely to be affected unless they retain old Elm mail tooling. Treat as high priority only where legacy Elm filter is present. The business risk is remote or local command execution through mail processing, but exposure should be rare in current environments. Mitigation focus: Inventory systems for Elm 2.4 and the filter command.; Apply vendor errata or package updates where available.; Disable Elm filter processing if the tool is no longer required..

Prepared

Jul 1, 2026, 09:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.