# CVE-1999-1415: DEC ULTRIX privilege escalation in /usr/bin/mail

Source: https://junglewise.ai/threats/cve-1999-1415-dec-ultrix-privilege-escalation-in-usr-bin-mail  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 1991-08-23. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-1999-1415 · Severity: medium · CVSS 4.6 · Published 1991-08-23

A vulnerability in the mail utility of the DEC ULTRIX operating system allows local users to gain unauthorized elevated privileges. This could allow a standard user to access sensitive system files or perform administrative actions, potentially compromising the entire server. The issue affects older versions of the ULTRIX operating system prior to version 4.2.

Technologies: [Digital Ultrix](https://junglewise.ai/threats/technologies/ultrix). Vendors: [Digital](https://junglewise.ai/threats/vendors/digital).

## Quick answers

**Is CVE-1999-1415 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-1999-1415 being exploited in the wild.

**How severe is CVE-1999-1415?** Medium severity, with a CVSS score of 4.6, published 23 August 1991.

**Which products and versions are affected?** DEC ULTRIX before 4.2.

**Is there a fix for CVE-1999-1415?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-1999-1415 attacked?** It is attacked with local access, in an operating system.

**Am I affected by CVE-1999-1415?** Check whether you run Digital Ultrix. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in the /usr/bin/mail binary in DEC ULTRIX versions prior to 4.2. The flaw allows a local, authenticated user to exploit the mail utility to escalate their privileges on the system. While the specific mechanism (e.g., race condition or buffer overflow) is not detailed in the legacy advisory, the impact is a compromise of confidentiality, integrity, and availability. The issue was addressed in DEC ULTRIX version 4.2.

## Affected products

- DEC ULTRIX before 4.2

## Timeline

- 1991-08-23: advisory: NVD published date
- 1991-08-23: disclosed: Original CERT advisory date

## References

- [http://www.cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability](http://www.cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability)
- [http://www.securityfocus.com/bid/27](http://www.securityfocus.com/bid/27)

## Related threats

- [Linux and Ultrix Information Disclosure in rpc.mountd](https://junglewise.ai/threats/cve-1999-1225-linux-and-ultrix-information-disclosure-in-rpc-mountd)
- [Multiple Vendors rlogin buffer overflow via TERM environment variable](https://junglewise.ai/threats/cve-1999-0046-multiple-vendors-rlogin-buffer-overflow-via-term-environment)
- [Digital Ultrix and OSF NFS access control bypass](https://junglewise.ai/threats/cve-1999-0170-digital-ultrix-and-osf-nfs-access-control-bypass)