CVE

Id
6973  
CVE No.
CVE-2003-0144  
Status
Candidate  
Description
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.  
Phase
Modified (20071113)  
Votes
ACCEPT(4) Armstrong, Cole, Green, Jones | NOOP(2) Christey, Cox  
Comments
Christey> DEBIAN:DSA-267 | URL:http://www.debian.org/security/2003/dsa-267 | Christey> DEBIAN:DSA-275 | URL:http://www.debian.org/security/2003/dsa-275 | Christey> DEBIAN:DSA-267 | URL:http://www.debian.org/security/2003/dsa-267 | Christey> SGI:20030406-02-P | Christey> MANDRAKE:MDKSA-2003:059 | URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:059  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40503 6973 CVE-2003-0144 BUGTRAQ:20030305 potential buffer overflow in lprm (fwd)  View
40504 6973 CVE-2003-0144 URL:http://marc.info/?l=bugtraq&m=104690434504429&w=2  View
40505 6973 CVE-2003-0144 BUGTRAQ:20030308 OpenBSD lprm(1) exploit  View
40506 6973 CVE-2003-0144 URL:http://marc.info/?l=bugtraq&m=104714441925019&w=2  View
40507 6973 CVE-2003-0144 CONFIRM:ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/010_lprm.patch  View
40508 6973 CVE-2003-0144 DEBIAN:DSA-267  View
40509 6973 CVE-2003-0144 URL:http://www.debian.org/security/2003/dsa-267  View
40510 6973 CVE-2003-0144 DEBIAN:DSA-275  View
40511 6973 CVE-2003-0144 URL:http://www.debian.org/security/2003/dsa-275  View
40512 6973 CVE-2003-0144 MANDRAKE:MDKSA-2003:059  View
40513 6973 CVE-2003-0144 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:059  View
40514 6973 CVE-2003-0144 SGI:20030406-02-P  View
40515 6973 CVE-2003-0144 URL:ftp://patches.sgi.com/support/free/security/advisories/20030406-02-P  View
40516 6973 CVE-2003-0144 SUSE:SuSE-SA:2003:0014  View
40517 6973 CVE-2003-0144 URL:http://www.novell.com/linux/security/advisories/2003_014_lprold.html  View
40518 6973 CVE-2003-0144 BID:7025  View
40519 6973 CVE-2003-0144 URL:http://www.securityfocus.com/bid/7025  View
40520 6973 CVE-2003-0144 SECUNIA:8293  View
40521 6973 CVE-2003-0144 URL:http://secunia.com/advisories/8293  View
40522 6973 CVE-2003-0144 XF:lprm-bo(11473)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63351 JVNDB-2003-000077 tcpdump における不明な RADIUS 属性に対して処理を適切に行わない脆弱性 ------------ CVE-2003-0145 6973 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000077.html  View