CVE-1999-1102 lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000....
LowCVSS 2.1
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi irix | <= 5.2 | No fix listed |
| apple a ux | = 2.0.1 | No fix listed |
| bsd | = 4.3 | No fix listed |
| sunos | <= 4.1.1 | No fix listed |
References
- E-25a government-resource patch third-party-advisory vendor-advisory
- 19940307 8lgm Advisory Releases mailing-list
- www.phreak.org exploit vendor-advisory