Unscored severity · published Nov 29, 2002
CVE-2002-1285
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments
–
CVSS
0.4%
EPSS
No
On KEV
Description
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
Suse Linux · Suse
7.0; 7.1; 7.2; 7.3; 8.0; 8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1285
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1285
Vendor Advisory
http://www.iss.net/security_center/static/10525.php
www.novell.com
http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html
www.securityfocus.com
http://www.securityfocus.com/bid/6077
More from Suse Linux
9.8
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges
9.8
CVE-1999-0426
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing
8.2
CVE-2017-3224
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber
7.8
CVE-2004-0940
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via…
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync