NetSight
IP …
high7.2Public exploit code

CVE-2003-0144

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows lo…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.

Affected products

VendorProductAffected versions
LproldLprold
Version 3.0.48
BsdLpr
Versions 0.48, 2000-05-07
FreebsdFreebsd
Versions 2.2, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6
OpenbsdOpenbsd
Versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.5

References