CVE-1999-1102

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://ciac.llnl.gov/ciac/bulletins/e-25.shtmlPatch, Vendor Advisory
http://www.aenigma.net/resources/maillist/bugtraq/1994/0091.htm
http://www.phreak.org/archives/security/8lgm/8lgm.lprExploit, Vendor Advisory
http://ciac.llnl.gov/ciac/bulletins/e-25.shtmlPatch, Vendor Advisory
http://www.aenigma.net/resources/maillist/bugtraq/1994/0091.htm
http://www.phreak.org/archives/security/8lgm/8lgm.lprExploit, Vendor Advisory

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-11044.6Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain pr CVE-1999-11055.0Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in CVE-1999-11095.0Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the CVE-1999-11105.0Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows CVE-1999-11117.5Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a no CVE-1999-11127.5Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type CVE-1999-11172.1lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.CVE-1999-11247.5HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the ta CVE-1999-11262.1Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive conf CVE-1999-11277.5Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (r CVE-1999-11297.5Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identif CVE-1999-11305.0Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read