CVE-2003-0144

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.91% chance of exploitation in the next 30 days, 78th percentile

Published

2003-03-14

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=104714441925019&w=2

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/22332
• https://www.exploit-db.com/exploits/22331

References

• CVE Record
• NVD entry

Related

• CVE-2003-0143
• CVE-2003-0150
• CVE-2003-0132
• CVE-2003-0153
• CVE-2003-0130
• CVE-2003-0154