CVE-1999-1385

CVE-1999-1385 describes a buffer overflow vulnerability in the ppp program within FreeBSD versions 2.1 and earlier. This flaw allows a local attacker to gain elevated privileges by supplying an excessively long HOME environment variable. Rated with a CVSS score of 7.2 (HIGH), the attack requires local access but is low complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this very old vulnerability.