20000424 Solaris 7 x86 lpset exploit.mailing list
http://archives.neohapsis.com/archives/bugtraq/2000-04/0192.html CVE-2000-0317
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (1)
Record summary
CVE-2000-0317 has a selected CVSS score of 7.2; EIP currently links 3 catalogued exploits.
Description
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 3
Proofs of concept
3Catalogued exploits
ExploitDBSolaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (1)ExploitDB exploitby DiGiTNot analyzed1 file
ExploitDBSolaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (2)ExploitDB exploitby Theodor Ragnar GislasonNot analyzed1 file
ExploitDBSolaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3)ExploitDB exploitby Theodor Ragnar GislasonNot analyzed1 file
References
520000426 Re: Solaris Sparc 2.6 & 7 lp/lpset/lpstat root compromise exploitmailing list
http://archives.neohapsis.com/archives/bugtraq/2000-04/0236.html 20000427 Re: Solaris/SPARC 2.7 lpset exploit (well not likely !)mailing list
http://marc.info/?l=bugtraq&m=95729763119559&w=2 1138vdb entry
http://www.securityfocus.com/bid/1138 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2000-0317