CVE-1999-1184

Elm < 2.4 - Buffer Overflow via TERM Environmental Variable

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-1184. PoCs published by kokanin.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Elm via the TERM environment variable. It uses a shellcode to spawn a shell, potentially allowing local privilege escalation on systems where Elm is installed setgid.

Description

Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.

Exploits (1)

exploitdb WORKING POC VERIFIED

by kokanin · perllocallinux

https://www.exploit-db.com/exploits/22836

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in Elm via the TERM environment variable. It uses a shellcode to spawn a shell, potentially allowing local privilege escalation on systems where Elm is installed setgid.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Elm Mail User Agent (ko-elm-2.4h4.1)

No auth needed

Prerequisites: Elm installed setgid on the target system · Ability to execute the exploit locally

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=87602167420967&w=2

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=87602167420970&w=2

Scores

EPSS 0.0060

EPSS Percentile 43.8%

Details

Status published

Products (2)

elm_development_group/elm 2.3

elm_development_group/elm < 2.4

Published May 13, 1997

Tracked Since Feb 18, 2026