Vulnerability in Plus Technologies Lpplus
CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 2.1 (Low). Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.009 (57.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 57th percentile — 57.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000
Affected products
- Plus Technologies Lpplus — versions 3.2.2, 3.3
References
- exchange.xforce.ibmcloud.com/vulnerabilities/5201 (vdb-entry)
- archives.neohapsis.com/archives/bugtraq/2000-08/0531.html (Vendor Advisory, mailing-list)
- www.securityfocus.com/bid/1644 (Exploit, vdb-entry, Vendor Advisory)