CVE-1999-0032

BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - '/usr/bin/lpr' Buffer Overrun Privilege Escalation

Severity Score

7.2

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

*Credits: N/A

CVSS Scores

NISTv2 7.2

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

1996-10-25 CVE Published
1996-10-25 First Exploit
1999-06-07 CVE Reserved
2024-02-08 EPSS Updated
2024-08-01 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (5)

URL	Tag	Source
http://www.ciac.org/ciac/bulletins/i-042.shtml	Government Resource
http://www.securityfocus.com/bid/707	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/19545	1996-10-25
https://www.exploit-db.com/exploits/19544	1996-10-25

URL	Date	SRC

URL	Date	SRC
ftp://patches.sgi.com/support/free/security/advisories/19980402-01-PX	2008-09-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				5.0 Search vendor "Sgi" for product "Irix" and version "5.0"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				5.0.1 Search vendor "Sgi" for product "Irix" and version "5.0.1"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				5.1 Search vendor "Sgi" for product "Irix" and version "5.1"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				5.1.1 Search vendor "Sgi" for product "Irix" and version "5.1.1"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				5.2 Search vendor "Sgi" for product "Irix" and version "5.2"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				5.3 Search vendor "Sgi" for product "Irix" and version "5.3"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				6.0 Search vendor "Sgi" for product "Irix" and version "6.0"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				6.0.1 Search vendor "Sgi" for product "Irix" and version "6.0.1"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				6.1 Search vendor "Sgi" for product "Irix" and version "6.1"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				6.2 Search vendor "Sgi" for product "Irix" and version "6.2"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				6.3 Search vendor "Sgi" for product "Irix" and version "6.3"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				6.4 Search vendor "Sgi" for product "Irix" and version "6.4"		-		Affected
Bsdi Search vendor "Bsdi"		Bsd Os Search vendor "Bsdi" for product "Bsd Os"				2.1 Search vendor "Bsdi" for product "Bsd Os" and version "2.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.0 Search vendor "Freebsd" for product "Freebsd" and version "2.0"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.0.5 Search vendor "Freebsd" for product "Freebsd" and version "2.0.5"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.1.0 Search vendor "Freebsd" for product "Freebsd" and version "2.1.0"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.1.5 Search vendor "Freebsd" for product "Freebsd" and version "2.1.5"		-		Affected
Next Search vendor "Next"		Nextstep Search vendor "Next" for product "Nextstep"				4.0 Search vendor "Next" for product "Nextstep" and version "4.0"		-		Affected
Next Search vendor "Next"		Nextstep Search vendor "Next" for product "Nextstep"				4.1 Search vendor "Next" for product "Nextstep" and version "4.1"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				4.1.3u1 Search vendor "Sun" for product "Sunos" and version "4.1.3u1"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				4.1.4 Search vendor "Sun" for product "Sunos" and version "4.1.4"		-		Affected