Description (CNA)
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.debian.org/security/2003/dsa-275
- http://www.securityfocus.com/bid/7025
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:059
- http://secunia.com/advisories/8293
- http://www.novell.com/linux/security/advisories/2003_014_lprold.html
- http://www.debian.org/security/2003/dsa-267
- http://marc.info/?l=bugtraq&m=104690434504429&w=2
- http://marc.info/?l=bugtraq&m=104714441925019&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11473
ADP enrichment
No English description supplied.
- http://www.debian.org/security/2003/dsa-275
- http://www.securityfocus.com/bid/7025
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:059
- http://secunia.com/advisories/8293
- http://www.novell.com/linux/security/advisories/2003_014_lprold.html
- http://www.debian.org/security/2003/dsa-267
- http://marc.info/?l=bugtraq&m=104690434504429&w=2
- http://marc.info/?l=bugtraq&m=104714441925019&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11473