CVE-1999-0032

Published: Oct 25, 1996Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

Affected (21)

Products: Sgi: Irix · Bsdi: Bsd Os · Freebsd: Freebsd · +2 more

Show all products

Sgi: Irix · Bsdi: Bsd Os · Freebsd: Freebsd · Next: Nextstep · Sun: Sunos

1 product

1 product

1 product

1 product

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Sgi Irix	Version 5.0.1
Sgi Irix	Version 5.0
Sgi Irix	Version 5.1.1
Sgi Irix	Version 5.1
Sgi Irix	Version 5.2
Sgi Irix	Version 5.3
Sgi Irix	Version 6.0.1
Sgi Irix	Version 6.0
Sgi Irix	Version 6.1
Sgi Irix	Version 6.2
Sgi Irix	Version 6.3
Sgi Irix	Version 6.4

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Bsdi Bsd Os	Version 2.1
Freebsd Freebsd	Version 2.0.5
Freebsd Freebsd	Version 2.0
Freebsd Freebsd	Version 2.1.0
Freebsd Freebsd	Version 2.1.5
Next Nextstep	Version 4.0
Next Nextstep	Version 4.1
Sun Sunos	Version 4.1.3u1
Sun Sunos	Version 4.1.4

References (6)

ftp://patches.sgi.com/support/free/security/advisories/19980402-01-PX (unsafe URL)

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/i-042.shtml

Source: cve@mitre.org

http://www.securityfocus.com/bid/707

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/19980402-01-PX (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ciac.org/ciac/bulletins/i-042.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/707

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.