3.6low
CVE-2000-08801 exploit
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
3.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.7%
percentile 55%
Public exploits
1
Exploit-DB
Summary
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.
Exploit prediction (EPSS)
0.74% probability of exploitation in the next 30 days, higher than 55% of all scored CVEs.
Exploits and detections
- EDB-20192 LPPlus 3.2.2/3.3 - Permissions Denial of Service · dos · 2000-09-06
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 3.6 | AV:L/AC:L/Au:N/C:N/I:P/A:P |
References
- securityfocus.com /bid/1643 · vdb-entry, x_refsource_BID, x_transferred
- archives.neohapsis.com /archives/bugtraq/2000-08/0531.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/5200 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2000-0880
- NVD: CVE-2000-0880
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.