Description
LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services.
References
- 1643 vdb-entry
- 20000906 Multiple Security Holes in LPPlus mailing-list
- lpplus-permissions-dos(5199) vdb-entry