PT-2002-1066 · Red Hat+1 · Red Hat+1

Published 2002-06-15 · Updated 2008-09-10 · CVE-2002-0378

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LPRng versions 3.7.4 through 3.8.9 Red Hat Linux versions 7.0 through 7.3

Description The issue affects the LPRng print spooler, which in its default configuration, accepts print jobs from arbitrary remote hosts. This can lead to a breach of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely.

Recommendations For LPRng versions 3.7.4 through 3.8.9, consider restricting access to the print spooler to prevent remote exploitation until a patch is available. For Red Hat Linux versions 7.0 through 7.3, update the configuration of the LPRng print spooler to only accept print jobs from trusted hosts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-08158

BDU:2015-08159

CVE-2002-0378

Affected Products

Lprng

Red Hat

References · 9

• http://redhat.com/support/errata/RHSA-2002-089.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08159 · Security Note
• http://online.securityfocus.com/advisories/4205 · Vendor Advisory
• http://linux-mandrake.com/en/security/2002/MDKSA-2002-042.php · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08158 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-0378 · Security Note
• http://iss.net/security_center/static/9322.php · Note
• http://securityfocus.com/bid/4980 · Note
• https://rhn.redhat.com/errata/RHSA-2003-142.html · Note