CVE-2003-0144

Lprold - Buffer Overflow

Title source: rule
STIX 2.1

Description

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.

Exploits (2)

exploitdb WORKING POC VERIFIED
by CMN · clocalunix
https://www.exploit-db.com/exploits/22332
exploitdb WORKING POC VERIFIED
by Niall Smart · clocalunix
https://www.exploit-db.com/exploits/22331

Scores

EPSS 0.0025
EPSS Percentile 48.2%

Details

Status published
Products (22)
bsd/lpr 0.48
bsd/lpr 2000-05-07
freebsd/freebsd 2.2
freebsd/freebsd 2.2.2
freebsd/freebsd 2.2.3
freebsd/freebsd 2.2.4
freebsd/freebsd 2.2.5
freebsd/freebsd 2.2.6
lprold/lprold 3.0.48
openbsd/openbsd 2.0
... and 12 more
Published Mar 31, 2003
Tracked Since Feb 18, 2026