Unscored severity · published Mar 31, 2003
CVE-2003-0144
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
2.2; 2.2.2; 2.2.3; 2.2.4; 2.2.5; 2.2.6 · source: NVD
LP
Lpr · Bsd
0.48; 2000-05-07 · source: NVD
LP
Lprold · Lprold
3.0.48 · source: NVD
OP
Openbsd · Openbsd
2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0144
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0144
marc.info
http://marc.info/?l=bugtraq&m=104690434504429&w=2
marc.info
http://marc.info/?l=bugtraq&m=104714441925019&w=2
secunia.com
http://secunia.com/advisories/8293
www.debian.org
http://www.debian.org/security/2003/dsa-267
