Lucene search

[email protected]CVE-2002-1285

HistoryNov 29, 2002 - 5:00 a.m.

CVE-2002-1285

2002-11-2905:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-1285

runlpr

lprng

local privilege escalation

security vulnerability

nvd

6.9 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

19.3%

JSON

runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.

CPENameOperatorVersion
suse:suse_linuxsuse suse linuxeq7.2
suse:suse_linuxsuse suse linuxeq8.0
suse:suse_linuxsuse suse linuxeq7.0
suse:suse_linuxsuse suse linuxeq7.1
suse:suse_linuxsuse suse linuxeq7.3
suse:suse_linuxsuse suse linuxeq8.1

CPE	Name	Operator	Version
suse:suse_linux	suse suse linux	eq	7.2
suse:suse_linux	suse suse linux	eq	8.0
suse:suse_linux	suse suse linux	eq	7.0
suse:suse_linux	suse suse linux	eq	7.1
suse:suse_linux	suse suse linux	eq	7.3
suse:suse_linux	suse suse linux	eq	8.1

References

www.iss.net/security_center/static/10525.php

www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html

www.securityfocus.com/bid/6077

6.9 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

19.3%

JSON

Related for CVE-2002-1285

cvelist1 suse1