CVE-1999-1102: Apple A Ux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.

Affected products

• Apple A Ux: version 2.0.1 only
• Bsd Bsd: version 4.3 only
• Sgi Irix: up to and including 5.2
• Sun Sunos: up to and including 4.1.1

Published 1999-12-31. Last modified 2026-06-16.