PT-2000-1549 · Lprng · Lprng

Published 2000-07-19 · Updated 2017-10-10 · CVE-2000-0615

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LPRng versions 3.6.x

Description The issue allows local users to append lpd trace and logging messages to files due to improper installation of lpd as setuid root.

Recommendations For LPRng versions 3.6.x, ensure that lpd is not installed as setuid root to prevent local users from appending to files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0615

Affected Products

Lprng

References · 4

• 🔥 http://securityfocus.com/bid/1447 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0117.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0615 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7361 · Note