CVE-2000-0615

LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2000-07-19

Last modified

2024-08-08

Affected products

• Lprng (Astart Technologies)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-07/0117.html
• http://www.securityfocus.com/bid/1447
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7361