CVE-2003-0144
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2003-0144
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2003-0144.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2003-0144
- Related
- Published
- 2003-03-31T05:00:00Z
- Modified
- 2024-11-20T23:44:04Z
- Summary
- [none]
- Details
-
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
- References
-
- ftp://patches.sgi.com/support/free/security/advisories/20030406-02-P
- http://secunia.com/advisories/8293
- http://www.debian.org/security/2003/dsa-267
- http://www.debian.org/security/2003/dsa-275
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:059
- http://www.novell.com/linux/security/advisories/2003_014_lprold.html
- http://www.securityfocus.com/bid/7025
- ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/010_lprm.patch
- http://marc.info/?l=bugtraq&m=104690434504429&w=2
- http://marc.info/?l=bugtraq&m=104714441925019&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11473
- https://security-tracker.debian.org/tracker/CVE-2003-0144
Affected packages
Debian:11 / lpr
Package
- Name
- lpr
- Purl
- pkg:deb/debian/lpr?arch=source
Debian:12 / lpr
Package
- Name
- lpr
- Purl
- pkg:deb/debian/lpr?arch=source
Debian:13 / lpr
Package
- Name
- lpr
- Purl
- pkg:deb/debian/lpr?arch=source