A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
...
1.2CVSS7AI score0.00321EPSS
SaveExploits0
NVD•added 1999/04/05 4:0 a.m.•15 views
CVE-1999-0439
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file...
