Local Privilege Escalation Vulnerability in NeXT 1.0a and 1.0
CVE-1999-1391

Currently unrated

Key Information:

Vendor: Next
Status: Next
Vendor: CVE Published:; 3 October 1990

What is CVE-1999-1391?

The vulnerability in NeXTSTEP 1.0a and 1.0 arises due to improper security configurations in the npd program coupled with insufficient directory permissions. This allows local users to exploit publicly accessible printers to gain elevated privileges, potentially compromising the system integrity. Organizations using these versions must assess their directory settings and implement robust security measures to mitigate potential exploits.

References

http://www.securityfocus.com/bid/10

vdb-entryx_refsource_BID

http://www.cert.org/advisories/CA-1990-06.html

third-party-advisoryx_refsource_CERT

http://www.iss.net/security_center/static/7143.php

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Aug 31, 2001
Vulnerability published
Oct 3, 1990

CVE-1999-1391 Data

JSON

Next

What is CVE-1999-1391?

References

Timeline