A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.

...

CVE-1999-0439

Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file...