PT-2003-2530 · Debian+3 · Debian+3

Claes Nyberg + 1 · Published 1970-01-01 · Updated 2017-07-11 · CVE-2003-0144

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions lprold lpr package versions 7.1 through 7.3 OpenBSD versions 3.2 and earlier Debian GNU/Linux (affected versions not specified) lpr-ppd package (affected versions not specified)

Description The issue allows local users to gain root privileges via long command line arguments, such as request ID or user name, potentially leading to disruption of confidentiality, integrity, and availability of protected information. The exploitation can be carried out by a local attacker.

Recommendations For lprold lpr package versions 7.1 through 7.3, consider disabling the lprm command until a patch is available. For OpenBSD versions 3.2 and earlier, restrict access to the lprm command to minimize the risk of exploitation. For Debian GNU/Linux and lpr-ppd package, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-03066

BDU:2015-03710

CVE-2003-0144

DSA-267

DSA-275

Affected Products

Debian

Openbsd

Lpr-Ppd

Lprold Lpr

References · 22

• 🔥 http://securityfocus.com/bid/7025 · Exploit
• 🔥 https://exploit-db.com/exploits/22331 · Exploit
• 🔥 https://exploit-db.com/exploits/22332 · Exploit
• https://bdu.fstec.ru/vul/2015-03066 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2003:059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0144 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0144 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2003-0144 · Vendor Advisory
• http://novell.com/linux/security/advisories/2003_014_lprold.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0144 · Vendor Advisory
• http://debian.org/security/2003/dsa-267 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03710 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20030406-02-P · Vendor Advisory
• http://debian.org/security/2003/dsa-275 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0144 · Vendor Advisory