low2.1Public exploit code
CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LPPlus 3.2.2/3.3 - dccscan Unprivileged read2000-09-06 · local · unix · Verified
Impact
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plus Technologies | Lpplus | Versions 3.2.2, 3.3 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html
- http://www.securityfocus.com/bid/1644
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5201
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html
- http://www.securityfocus.com/bid/1644
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5201