PT-1990-1006 · Next · Next

Published 1990-10-03 · Updated 2025-04-03 · CVE-1999-1391

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NeXT versions 1.0a and 1.0

Description The issue allows local users to gain privileges through a combination of the npd program and weak directory permissions, specifically when printers are publicly accessible.

Recommendations For NeXT versions 1.0a and 1.0, restrict access to publicly accessible printers and adjust directory permissions to prevent exploitation.

Fix

Related Identifiers

CVE-1999-1391

Affected Products

Next

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-1999-1391 · Security Note
• http://cert.org/advisories/CA-1990-06.html · Patch
• http://ciac.llnl.gov/ciac/bulletins/b-01.shtml · Vendor Advisory
• http://securityfocus.com/bid/10 · Note
• https://t.me/cvenotify/117489 · Telegram Post
• http://iss.net/security_center/static/7143.php · Note