CVE-1999-1140

CrackLib 2.5 is vulnerable to a local privilege escalation via a buffer overflow caused by a long GECOS field, enabling root privileges. The CVE-1999-1140 entry cites a local attack vector with high impact (C/C/I/A) and a base score of 7.2. No explicit remediation or exploit details are provided ...