Lprng
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2001-0787 | 0.03 | — | 0.01 | Oct 18, 2001 | LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges. | |||
| CVE-2003-0136 | 0.00 | — | 0.00 | May 5, 2003 | psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file. | |||
| CVE-2002-0378 | 0.00 | — | 0.02 | Jul 3, 2002 | The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts. | |||
| CVE-2000-0615 | 0.00 | — | 0.00 | Jul 19, 2000 | LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files. |
- CVE-2001-0787Oct 18, 2001risk 0.03cvss —epss 0.01
LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.
- CVE-2003-0136May 5, 2003risk 0.00cvss —epss 0.00
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file.
- CVE-2002-0378Jul 3, 2002risk 0.00cvss —epss 0.02
The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts.
- CVE-2000-0615Jul 19, 2000risk 0.00cvss —epss 0.00
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.