Vulnerability in Bsdi Bsd_os

CVE-1999-0032

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

EPSS: 0.010 (58.2th percentile) — read the EPSS interpretation.

Affected products

Bsdi Bsd_os — versions 2.1
Freebsd — versions 2.0, 2.0.5, 2.1.0
Next Nextstep — versions 4.0, 4.1
Sgi Irix — versions 5.0, 5.0.1, 5.1
Sun Sunos — versions 4.1.3u1, 4.1.4
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)