low2.1
CVE-2000-0615
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.
Impact
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Astart Technologies | Lprng | Versions 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0117.html
- http://www.securityfocus.com/bid/1447
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7361
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0117.html
- http://www.securityfocus.com/bid/1447
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7361