What is the severity of CVE-1999-1102?

CVE-1999-1102 is a vulnerability that allows local users to perform a symlink attack, potentially resulting in the creation or overwriting of arbitrary files.

How do I fix CVE-1999-1102?

To fix CVE-1999-1102, ensure that lpr is updated to a version that mitigates the symlink vulnerability or restrict access to lpr commands for non-privileged users.

Which operating systems are affected by CVE-1999-1102?

CVE-1999-1102 affects SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems.

Can CVE-1999-1102 be exploited remotely?

CVE-1999-1102 is a local vulnerability and cannot be exploited remotely, as it requires local user access.

What type of attack does CVE-1999-1102 facilitate?

CVE-1999-1102 facilitates a symlink attack, which can allow arbitrary file manipulation by local users.

Vulnerability/
CVE-1999-1102

low

2.1

CWE

NVD-CWE-Other

31/12/1999

9/3/2002

20/11/2024

CVE-1999-1102

First published: Fri Dec 31 1999(Updated: )

lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
SGI IRIX	<=5.2
apple a ux	=2.0.1
BSD	=4.3
Sun SunOS	<=4.1.1

Remedy

http://ciac.llnl.gov/ciac/bulletins/e-25.shtml

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-1999-1102?
CVE-1999-1102 is a vulnerability that allows local users to perform a symlink attack, potentially resulting in the creation or overwriting of arbitrary files.
How do I fix CVE-1999-1102?
To fix CVE-1999-1102, ensure that lpr is updated to a version that mitigates the symlink vulnerability or restrict access to lpr commands for non-privileged users.
Which operating systems are affected by CVE-1999-1102?
CVE-1999-1102 affects SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems.
Can CVE-1999-1102 be exploited remotely?
CVE-1999-1102 is a local vulnerability and cannot be exploited remotely, as it requires local user access.
What type of attack does CVE-1999-1102 facilitate?
CVE-1999-1102 facilitates a symlink attack, which can allow arbitrary file manipulation by local users.

agent/type
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/weakness
agent/references
agent/remedy
agent/severity
agent/description
agent/event
agent/last-modified-date
agent/author
agent/source
agent/tags
agent/softwarecombine
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-historical
collector/nvd-index
vendor/sgi
canonical/sgi irix
version/sgi irix/5.2
vendor/apple
canonical/apple a ux
version/apple a ux/2.0.1
vendor/bsd
canonical/bsd
version/bsd/4.3
vendor/sun
canonical/sun sunos
version/sun sunos/4.1.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.