vulnwire
7.2high

CVE-2003-01442 exploits

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operatin…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.9%
percentile 80%
Public exploits
2
Exploit-DB

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.

Exploit prediction (EPSS)

1.91% probability of exploitation in the next 30 days, higher than 80% of all scored CVEs.

Exploits and detections

  • EDB-22332 BSD 'lpr' 2000.05.07/0.48/0.72 / lpr-ppd 0.72 - Local Buffer Overflow (2) · local · 1998-04-22
  • EDB-22331 BSD 'lpr' 2000.05.07/0.48/0.72 / lpr-ppd 0.72 - Local Buffer Overflow (1) · local · 1998-04-22

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • debian.org /security/2003/dsa-275 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • securityfocus.com /bid/7025 · vdb-entry, x_refsource_BID, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2003:059 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • secunia.com /advisories/8293 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • novell.com /linux/security/advisories/2003_014_lprold.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • debian.org /security/2003/dsa-267 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • marc.info /?l=bugtraq&m=104690434504429&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • marc.info /?l=bugtraq&m=104714441925019&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/11473 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.