CVE-2000-0917

Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2000-12-19

Last modified

2024-08-08

Affected products

• Openlinux (Caldera)
• Openlinux Ebuilder (Caldera)
• Openlinux Edesktop (Caldera)
• Openlinux Eserver (Caldera)
• Linux (Redhat)
• Secure Linux (Trustix)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-09/0293.html
• http://www.calderasystems.com/support/security/advisories/CSSA-2000-033.0.txt
• http://www.cert.org/advisories/CA-2000-22.html
• http://www.redhat.com/support/errata/RHSA-2000-065.html
• http://www.securityfocus.com/bid/1712
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5287