Description
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Niall Smart · clocalunix
https://www.exploit-db.com/exploits/22331
References (11)
Scores
EPSS
0.0025
EPSS Percentile
48.2%
Details
Status
published
Products (22)
bsd/lpr
0.48
bsd/lpr
2000-05-07
freebsd/freebsd
2.2
freebsd/freebsd
2.2.2
freebsd/freebsd
2.2.3
freebsd/freebsd
2.2.4
freebsd/freebsd
2.2.5
freebsd/freebsd
2.2.6
lprold/lprold
3.0.48
openbsd/openbsd
2.0
... and 12 more
Published
Mar 31, 2003
Tracked Since
Feb 18, 2026