Unscored CVE-2000-1208 EUVD-2000-1193GHSA-x8pj-r335-vm92

Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges…

Published Aug 1, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.

References

20000925 Format strings: bug #1: BSD-lpr mailing-list
lpr-checkremote-format-string(5286) vdb-entry
1711 vdb-entry
20001004 Immunix OS Security Update for lpr mailing-list
RHSA-2000:066 vendor-advisory