PT-2000-1727 · Sgi · Irix
Published
2000-10-20
·
Updated
2008-09-05
·
CVE-2000-0795
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
IRIX versions 6.2 through 6.3
Description
A buffer overflow issue in the lpstat command allows local users to gain root privileges by providing a long -n option.
Recommendations
For IRIX versions 6.2 and 6.3, consider restricting access to the lpstat command until a patch is available.
As a temporary workaround, avoid using the -n option with long inputs in the lpstat command to minimize the risk of exploitation.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Irix