CVE-2000-0917 Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
HighCVSS 10.0
EPSS 78.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera openlinux ebuilder | = 3.0 | No fix listed |
| caldera openlinux | All versions | No fix listed |
| caldera openlinux edesktop | = 2.4 | No fix listed |
| caldera openlinux eserver | = 2.3 | No fix listed |
| redhat linux | = 7.0 | No fix listed |
| trustix secure linux | = 1.0 | No fix listed |
| trustix secure linux | = 1.1 | No fix listed |
References
- CSSA-2000-033.0 vendor-advisory
- CA-2000-22 third-party-advisory us-government-resource
- 20000925 Format strings: bug #2: LPRng mailing-list
- RHSA-2000:065 vendor-advisory
- lprng-format-string(5287) vdb-entry
- 1712 exploit patch vdb-entry vendor-advisory