Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 14/11/2000 Updated: 19/12/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
plus technologies lpplus 3.2.2
plus technologies lpplus 3.3

source: wwwsecurityfocuscom/bid/1644/info $LPHOME/bin/dccscan is suid-root and can be executed by any user It is possible for an unprivileged user to print files to which he does not have read access In testing, this works even for printers to which the user is is not given any access in the LPPlus security configuration # id uid=0(ro ...

NVD-CWE-Other http://www.securityfocus.com/bid/1644 http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5201 https://nvd.nist.gov https://www.exploit-db.com/exploits/20193/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2000-0881

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect