← Vulnerability feed

Vulnerability record · CVE-1999-0956 · published 19 September 1997

CVE-1999-0956: Nextstep vulnerability

Next · Nextstep

The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.

7.2 CVSS 2.0 High EPSS 0.40% · top 68.5%
7.2CVSS 2.0 base score
0.40%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0956
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0956

Track CVE-1999-0956 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-1999-0046rlogin buffer overflow via TERM environment variableThe rlogin program contains a classic buffer overflow (CWE-120) triggered through the TERM environment variable. Because rlogin is a network login se…EPSS 52%analysed7.2CVE-1999-0032Sgi irix vulnerabilityBuffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classificat…EPSS 0.99%1.9CVE-1999-0078Ncr mp-ras vulnerabilitypcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.EPSS 0.92%

Source: NIST National Vulnerability Database (record CVE-1999-0956), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.