CVEvulnerability

CVE-1999-0032

7.2 HIGH Published 1996-10-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1996-10-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

Affected configurations

• sgi irix 5.0 • sgi irix 5.0.1 • sgi irix 5.1 • sgi irix 5.1.1 • sgi irix 5.2 • sgi irix 5.3 • sgi irix 6.0 • sgi irix 6.0.1 • sgi irix 6.1 • sgi irix 6.2 • sgi irix 6.3 • sgi irix 6.4 • bsdi bsd os 2.1 • freebsd freebsd 2.0 • freebsd freebsd 2.0.5 • freebsd freebsd 2.1.0 • freebsd freebsd 2.1.5 • next nextstep 4.0 • next nextstep 4.1 • sun sunos 4.1.3u1 • sun sunos 4.1.4

References