high7.2Public exploit code
CVE-1999-0032
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) comma…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - '/usr/bin/lpr' Buffer Overrun Privilege Escalation (2)1996-10-25 · local · bsd · Verified
- BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - 'lpr' Buffer Overrun (1)1996-10-25 · local · linux · Verified
Impact
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sgi | Irix | Versions 5.0, 5.0.1, 5.1, 5.1.1, 5.2, 5.3 |
| Bsdi | Bsd Os | Version 2.1 |
| Freebsd | Freebsd | Versions 2.0, 2.0.5, 2.1.0, 2.1.5 |
| Next | Nextstep | Versions 4.0, 4.1 |
| Sun | Sunos | Versions 4.1.3u1, 4.1.4 |