CVE-2003-0144

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.91% chance of exploitation in the next 30 days, 80th percentile

Published

2003-03-14

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=104714441925019&w=2

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/22332
• https://www.exploit-db.com/exploits/22331

Security advisories

• http://www.securityfocus.com/bid/7025
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:059

References

• CVE Record
• NVD entry