CVE-1999-1391: High severity NeXT NeXT vulnerability
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
npdfrom your environment.Remove or disable the npd program if it is not required. If npd must remain, run it with least privilege and restrict access until a patch is available.
- Configuration
Disable publicly accessible printers or restrict printer access to authorized users only (do not allow printers to be publicly accessible).
printer service public_access = disabled - Configuration
Correct weak directory permissions for directories used by the npd program and related printer services—remove world-writable permissions and ensure ownership is limited to root or appropriate service accounts.
NeXT filesystem directories used by npd directory_permissions = restrict write/execute to appropriate owners - Compensating control
Restrict network-level access to printer services (for example via firewall, ACLs or network segmentation) so printers are not publicly accessible and only trusted hosts can reach them.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1391?
CVE-1999-1391 has a moderate severity level due to potential privilege escalation risks for local users.
How do I fix CVE-1999-1391?
To mitigate CVE-1999-1391, ensure proper directory permissions are set to prevent unauthorized access to the npd program.
Which versions are affected by CVE-1999-1391?
CVE-1999-1391 affects NeXT versions 1.0 and 1.0a.
Who can be impacted by CVE-1999-1391?
Local users have the potential to exploit the CVE-1999-1391 vulnerability to gain elevated privileges.
What vulnerabilities does CVE-1999-1391 exploit?
CVE-1999-1391 exploits weak directory permissions in combination with the functionality of the npd program.