CVE-1999-1102

CVSS 2.0 Score 2.1 of 10 (low)

Details

Published Dec 31, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-1102 is a vulnerability affecting the lpr (Line Printer Daemon) service on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems. Maliciously crafted symlinks allow local users to create or overwrite arbitrary files after lpr is invoked approximately 1000 times. This poses a serious risk to system security and integrity. Attackers can potentially gain unauthorized access to sensitive information or install malware, leading to potential data breaches or unauthorized system modifications. It is recommended to apply the necessary patches or updates to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SGI IRAX
  • SunOS
  • BSD BSD

Affected Vendors

  • Oracle Corp
  • Blue State Digital
  • Saskatchewan Government Insurance
  • Apple