CVE

Id
1895  
CVE No.
CVE-2000-0317  
Status
Candidate  
Description
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.  
Phase
Proposed (20000518)  
Votes
ACCEPT(3) Baker, Cole, Levy | MODIFY(1) Frech | NOOP(3) Christey, LeBlanc, Wall | RECAST(1) Dik  
Comments
Dik> there"s a lot of confusion in this one. | These point to buffer overflows: | Reference: BUGTRAQ:20000424 Solaris 7 x86 lpset exploit. | Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2000-04/0192.html | Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2000-04/0236.html | But these point to dlopen() in libprint that doesnt" check pathnames: | Reference: BUGTRAQ:20000427 Re: Solaris/SPARC 2.7 lpset exploit (well not likely !) | Reference: URL:http://marc.theaimsgroup.com/?l=bugtraq&m=95729763119559&w=2 | Reference: SUNBUG:4334568 | And this is a bufferoverflow again: | Reference: BID:1138 | Reference: URL:http://www.securityfocus.com/bid/1138 | Frech> XF:solaris-lpset-bo | Christey> ADDREF SUN:00195? Need to check with Casper.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
6064 1895 CVE-2000-0317 BUGTRAQ:20000424 Solaris 7 x86 lpset exploit.  View
6065 1895 CVE-2000-0317 URL:http://archives.neohapsis.com/archives/bugtraq/2000-04/0192.html  View
6066 1895 CVE-2000-0317 BUGTRAQ:20000426 Re: Solaris Sparc 2.6 & 7 lp/lpset/lpstat root compromise exploit  View
6067 1895 CVE-2000-0317 URL:http://archives.neohapsis.com/archives/bugtraq/2000-04/0236.html  View
6068 1895 CVE-2000-0317 BUGTRAQ:20000427 Re: Solaris/SPARC 2.7 lpset exploit (well not likely !)  View
6069 1895 CVE-2000-0317 URL:http://marc.info/?l=bugtraq&m=95729763119559&w=2  View
6070 1895 CVE-2000-0317 SUNBUG:4334568  View
6071 1895 CVE-2000-0317 BID:1138  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64246 JVNDB-2000-000026 Sun Solaris の lp コマンド -r オプションにおけるバッファオーバーフローの脆弱性 Sun Solaris lの lp コマンドでは、コマンドラインオプション、"-r" オプションを指定するバッファのチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2000-0317 1895 7.2 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000026.html  View