Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0880. PoCs published by Dixie Flatline.
AI-analyzed exploit summary The exploit demonstrates two vulnerabilities in LPPlus print management system: arbitrary control over print services via setuid binaries and privilege escalation to kill any process by manipulating a world-writable PID file. Both vulnerabilities allow low-privileged users to disrupt system processes.
Description
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.
Exploits (1)
The exploit demonstrates two vulnerabilities in LPPlus print management system: arbitrary control over print services via setuid binaries and privilege escalation to kill any process by manipulating a world-writable PID file. Both vulnerabilities allow low-privileged users to disrupt system processes.