CVE-2000-0881 The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
LowCVSS 2.1
EPSS 0.87%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| plus technologies lpplus | = 3.2.2 | No fix listed |
| plus technologies lpplus | = 3.3 | No fix listed |
References
- 20000906 Multiple Security Holes in LPPlus mailing-list vendor-advisory
- 1644 exploit vdb-entry vendor-advisory
- lpplus-dccscan-file-read(5201) vdb-entry