Unscored severity · published Sep 19, 1997
CVE-1999-0956
The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service
–
CVSS
0.4%
EPSS
No
On KEV
Description
The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Nextstep · Next
1.0; 1.0a; 2.0; 2.1; 3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0956
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0956
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0956
More from Nextstep
–
CVE-1999-0046
Buffer overflow of rlogin program using TERM environmental variable
–
CVE-1999-0032
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option
–
CVE-1999-0078
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call