CVE-1999-1409

CVE-1999-1409 describes a local file disclosure vulnerability in the 'at' program affecting IRIX 6.2 and NetBSD 1.3.2 and earlier. A local attacker can read portions of arbitrary files by submitting a file to 'at' using the -f argument, triggering error messages containing file content that are then emailed to the user. This vulnerability has a low CVSS score of 2.1, indicating low attack complexity and impact, primarily affecting confidentiality. While there is an ExploitDB entry (EDB-19261) detailing the exploit, there is no evidence of active exploitation, Metasploit modules, or significant community discussion surrounding this older vulnerability.