critical10.0Public exploit code
CVE-2000-0917
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LPRng - use_syslog Remote Format String (Metasploit)2010-07-03 · remote · linux · Verified
- LPRng 3.6.24-1 - Remote Command Execution2000-12-15 · remote · linux · Verified
- LPRng (RedHat 7.0) - 'lpd' Format String2000-12-11 · remote · linux · Verified
- LPRng 3.6.22/23/24 - Remote Command Execution2000-12-11 · remote · linux · Verified
Impact
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caldera | Openlinux Ebuilder | Version 3.0 |
| Caldera | Openlinux | All versions |
| Caldera | Openlinux Edesktop | Version 2.4 |
| Caldera | Openlinux Eserver | Version 2.3 |
| Redhat | Linux | Version 7.0 |
| Trustix | Secure Linux | Versions 1.0, 1.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0293.html
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-033.0.txt
- http://www.cert.org/advisories/CA-2000-22.html
- http://www.redhat.com/support/errata/RHSA-2000-065.html
- http://www.securityfocus.com/bid/1712
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5287
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0293.html
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-033.0.txt
- http://www.cert.org/advisories/CA-2000-22.html
- http://www.redhat.com/support/errata/RHSA-2000-065.html
- http://www.securityfocus.com/bid/1712
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5287