ID CVE-2000-0917
Summary Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
References
Vulnerable Configurations
  • cpe:2.3:a:caldera:openlinux_ebuilder:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:caldera:openlinux_ebuilder:3.0:*:*:*:*:*:*:*
  • cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*
    cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*
  • cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*
    cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*
  • cpe:2.3:o:caldera:openlinux_eserver:2.3:*:*:*:*:*:*:*
    cpe:2.3:o:caldera:openlinux_eserver:2.3:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:trustix:secure_linux:1.0:*:*:*:*:*:*:*
    cpe:2.3:o:trustix:secure_linux:1.0:*:*:*:*:*:*:*
  • cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*
    cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 10-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
redhat via4
advisories
rhsa
id RHSA-2000:065
refmap via4
bid 1712
bugtraq 20000925 Format strings: bug #2: LPRng
caldera CSSA-2000-033.0
cert CA-2000-22
freebsd FreeBSD-SA-00:56
xf lprng-format-string(5287)
Last major update 10-10-2017 - 01:29
Published 19-12-2000 - 05:00
Last modified 10-10-2017 - 01:29
Back to Top