PT-1999-1575 · Sun/Bsd/Apple · Lpr

Published 1999-12-31 · Updated 2008-09-05 · CVE-1999-1102

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions lpr versions on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1

Description The issue allows local users to create or overwrite arbitrary files via a symlink attack. This attack is triggered after invoking lpr 1000 times.

Recommendations For lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, consider restricting access to the lpr command until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-1999-1102

Affected Products

Lpr

References · 4

• 🔥 http://phreak.org/archives/security/8lgm/8lgm.lpr · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1102 · Security Note
• http://ciac.llnl.gov/ciac/bulletins/e-25.shtml · Vendor Advisory
• http://aenigma.net/resources/maillist/bugtraq/1994/0091.htm · Note