PT-1990-1006 · Next · Next

CVE-1999-1391 · Publicado 1990-10-03 · Atualizado 2025-04-03

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NeXT versions 1.0a and 1.0

Description The issue allows local users to gain privileges through a combination of the npd program and weak directory permissions, specifically when printers are publicly accessible.

Recommendations For NeXT versions 1.0a and 1.0, restrict access to publicly accessible printers and adjust directory permissions to prevent exploitation.

Correção

Identificadores relacionados

CVE-1999-1391

Produtos afetados

Next

Referências · 6

• http://securityfocus.com/bid/10 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1391 · Nota de Segurança
• http://cert.org/advisories/CA-1990-06.html · Correção
• https://t.me/cvenotify/117489 · Publicação no Telegram
• http://iss.net/security_center/static/7143.php · Nota
• http://ciac.llnl.gov/ciac/bulletins/b-01.shtml · Aviso do Fabricante