Description
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.
References
- lpd-suid-root(7361) vdb-entry
- 20000709 LPRng lpd should not be SETUID root mailing-list
- 1447 vdb-entry