Debian Lpr vulnerabilities
4 known vulnerabilities affecting debian/lpr.
Total CVEs
4
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH2
Vulnerabilities
Page 1 of 1
CVE-2003-0146HIGHCVSS 7.5fixed in lpr 1:2000.05.07-4.20 (bookworm)2003
CVE-2003-0146 [HIGH] CVE-2003-0146: lpr - Multiple vulnerabilities in NetPBM 9.20 and earlier, and possibly other versions...
Multiple vulnerabilities in NetPBM 9.20 and earlier, and possibly other versions, may allow remote attackers to cause a denial of service or execute arbitrary code via "maths overflow errors" such as (1) integer signedness errors or (2) integer overflows, which lead to buffer overflows.
Scope: local
bookworm: resolved (fixed in 1:2000.05.07-4.20)
bullseye: resolved (fixed
debian
CVE-2003-0144HIGHCVSS 7.2PoCfixed in lpr 1:2000.05.07-4.20 (bookworm)2003
CVE-2003-0144 [HIGH] CVE-2003-0144: lpr - Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 throug...
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
Scope: local
bookworm: resolved (fixed in 1:2000.05.07-4.20)
bullseye: resolved (fixed in 1:2000.05.07-4.20)
debian
CVE-2000-1221CRITICALCVSS 10.0PoCfixed in lpr 1:0.48-1 (bookworm)2000
CVE-2000-1221 [CRITICAL] CVE-2000-1221: lpr - The line printer daemon (lpd) in the lpr package in multiple Linux operating sys...
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
Scope: local
bookworm: resolved (fi
debian
CVE-2000-1220CRITICALCVSS 10.0PoCfixed in lpr 1:0.48-1 (bookworm)2000
CVE-2000-1220 [CRITICAL] CVE-2000-1220: lpr - The line printer daemon (lpd) in the lpr package in multiple Linux operating sys...
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
Scope: local
bookworm: resolved (fixed in 1:0.48-1)
bullseye: resolved (fixed in 1:0.48-1)
forky: resol
debian