low3.6Public exploit code
CVE-2000-0880
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LPPlus 3.2.2/3.3 - Permissions Denial of Service2000-09-06 · dos · unix · Verified
Impact
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plus Technologies | Lpplus | Versions 3.2.2, 3.3 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html
- http://www.securityfocus.com/bid/1643
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5200
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html
- http://www.securityfocus.com/bid/1643
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5200