lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.
References
Link | Resource |
---|---|
http://ciac.llnl.gov/ciac/bulletins/e-25.shtml | Patch Vendor Advisory |
http://www.aenigma.net/resources/maillist/bugtraq/1994/0091.htm | |
http://www.phreak.org/archives/security/8lgm/8lgm.lpr | Exploit Vendor Advisory |
Configurations
History
No history.
Information
Published : 1999-12-31 05:00
Updated : 2024-02-28 10:24
NVD link : CVE-1999-1102
Mitre link : CVE-1999-1102
CVE.ORG link : CVE-1999-1102
JSON object : View
Products Affected
sgi
- irix
sun
- sunos
bsd
- bsd
apple
- a_ux
CWE