CVE-2003-0144 Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via lon...
HighCVSS 7.2
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lprold | = 3.0.48 | No fix listed |
| bsd lpr | = 0.48 | No fix listed |
| bsd lpr | = 2000-05-07 | No fix listed |
| freebsd | = 2.2 | No fix listed |
| freebsd | = 2.2.2 | No fix listed |
| freebsd | = 2.2.3 | No fix listed |
| freebsd | = 2.2.4 | No fix listed |
| freebsd | = 2.2.5 | No fix listed |
| freebsd | = 2.2.6 | No fix listed |
| OpenBSD | = 2.0 | No fix listed |
| OpenBSD | = 2.1 | No fix listed |
| OpenBSD | = 2.2 | No fix listed |
| OpenBSD | = 2.3 | No fix listed |
| OpenBSD | = 2.4 | No fix listed |
| OpenBSD | = 2.5 | No fix listed |
| OpenBSD | = 2.6 | No fix listed |
| OpenBSD | = 2.7 | No fix listed |
| OpenBSD | = 2.8 | No fix listed |
| OpenBSD | = 2.9 | No fix listed |
| OpenBSD | = 3.0 | No fix listed |
| OpenBSD | = 3.1 | No fix listed |
| OpenBSD | = 3.2 | No fix listed |
| debian/lpr(Debian:12) | < 1:2000.05.07-4.20 | 1:2000.05.07-4.20 |
| debian/lpr(Debian:13) | < 1:2000.05.07-4.20 | 1:2000.05.07-4.20 |
| debian/lpr(Debian:14) | < 1:2000.05.07-4.20 | 1:2000.05.07-4.20 |
References
- 20030305 potential buffer overflow in lprm (fwd) mailing-list
- 20030308 OpenBSD lprm(1) exploit mailing-list
- 8293 third-party-advisory
- DSA-267 vendor-advisory
- DSA-275 vendor-advisory
- MDKSA-2003:059 vendor-advisory
- SuSE-SA:2003:0014 vendor-advisory
- 7025 exploit patch vdb-entry vendor-advisory
- lprm-bo(11473) vdb-entry
- Debian Security Tracker CVE-2003-0144 vendor-advisory