PT-1999-1575 · Sun/Bsd/Apple · Lpr

Publicado 1999-12-31 · Atualizado 2008-09-05 · CVE-1999-1102

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions lpr versions on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1

Description The issue allows local users to create or overwrite arbitrary files via a symlink attack. This attack is triggered after invoking lpr 1000 times.

Recommendations For lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, consider restricting access to the lpr command until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-1999-1102

Produtos afetados

Lpr

Referências · 4

• 🔥 http://phreak.org/archives/security/8lgm/8lgm.lpr · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1102 · Nota de Segurança
• http://aenigma.net/resources/maillist/bugtraq/1994/0091.htm · Nota
• http://ciac.llnl.gov/ciac/bulletins/e-25.shtml · Aviso do Fabricante