The HP Tru64 UNIX implementation of "lpr" contains a locally exploitable buffer overflow.
"lpr" is used to send files to a print spool. A locally exploitable buffer overflow in "lpr" may permit a local attacker to gain elevated privileges and execute arbitrary code on a vulnerable host.
A local user may be able to gain elevated privileges and execute arbitrary code.
Apply a patch.
Filter by status: All Affected Not Affected Unknown
Filter by content: __ Vendor has issued information
__ Sort by: Status Alphabetical
Affected Unknown __ Unaffected
Updated: September 06, 2002
The vendor has not provided us with any further information regarding this vulnerability.
The CERT/CC has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us email.
Group | Score | Vector
Base | N/A | N/A
Temporal | N/A | N/A
Environmental | | N/A
This document was written by Ian A Finlay.
CVE IDs: | None
Severity Metric:** | 7.50
Date Public: | 2002-08-30
Date First Published: | 2002-09-06
Date Last Updated: | 2002-09-06 19:12 UTC
Document Revision: | 5