Lucene search
HistoryNov 14, 2000 - 5:00 a.m.
CVE-2000-0880
cve-2000-0880
lpplus
local attack
world-writeable permissions
process termination
setuid
dcclpdshut
nvd
7.2 High
AI Score
Confidence
Low
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
0.4%
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| plus_technologies:lpplus | plus technologies lpplus | eq | 3.3 |
| plus_technologies:lpplus | plus technologies lpplus | eq | 3.2.2 |
7.2 High
AI Score
Confidence
Low
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
0.4%