PT-2000-1549 · Lprng · Lprng

Publicado 2000-07-19 · Atualizado 2017-10-10 · CVE-2000-0615

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LPRng versions 3.6.x

Description The issue allows local users to append lpd trace and logging messages to files due to improper installation of lpd as setuid root.

Recommendations For LPRng versions 3.6.x, ensure that lpd is not installed as setuid root to prevent local users from appending to files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2000-0615

Produtos afetados

Lprng

Referências · 4

• 🔥 http://securityfocus.com/bid/1447 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7361 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0117.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0615 · Nota de Segurança