Lucene search

[email protected]CVE-2002-1285

HistoryNov 29, 2002 - 5:00 a.m.

CVE-2002-1285

2002-11-2905:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1285

runlpr

lprng

local privilege escalation

security vulnerability

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.7%

JSON

runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.

Affected configurations

NVD

Node

susesuse_linuxMatch7.0

susesuse_linuxMatch7.1

susesuse_linuxMatch7.2

susesuse_linuxMatch7.3

susesuse_linuxMatch8.0

susesuse_linuxMatch8.1

CPENameOperatorVersion
suse:suse_linuxsuse suse linuxeq7.0
suse:suse_linuxsuse suse linuxeq7.1
suse:suse_linuxsuse suse linuxeq7.2
suse:suse_linuxsuse suse linuxeq7.3
suse:suse_linuxsuse suse linuxeq8.0
suse:suse_linuxsuse suse linuxeq8.1

CPE	Name	Operator	Version
suse:suse_linux	suse suse linux	eq	7.0
suse:suse_linux	suse suse linux	eq	7.1
suse:suse_linux	suse suse linux	eq	7.2
suse:suse_linux	suse suse linux	eq	7.3
suse:suse_linux	suse suse linux	eq	8.0
suse:suse_linux	suse suse linux	eq	8.1

References

www.iss.net/security_center/static/10525.php

www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html

www.securityfocus.com/bid/6077

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.7%

JSON

Related for CVE-2002-1285

nvd1 cvelist1 suse1