CyberSec.Space Logo
Back to CVE Browser

CVE-2000-0917

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1670%
EPSS Percentile24.14th
PublishedDec 19, 2000
Last ModifiedApr 16, 2026

Vulnerability Description

Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.

Affected Platforms (CPE)

📦
Caldera

Openlinux Ebuilder

= 3.0
💻
Caldera

Openlinux

All versions
💻
Caldera

Openlinux Edesktop

= 2.4
💻
Caldera

Openlinux Eserver

= 2.3
💻
Redhat

Linux

= 7.0
💻
Trustix

Secure Linux

= 1.0
💻
Trustix

Secure Linux

= 1.1

References & Advisories

🔗 ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:56.lprng.asc
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-09/0293.html
🔗 http://www.calderasystems.com/support/security/advisories/CSSA-2000-033.0.txt
🔗 http://www.cert.org/advisories/CA-2000-22.html
🔗 http://www.redhat.com/support/errata/RHSA-2000-065.html
🔗 http://www.securityfocus.com/bid/1712
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5287
🔗 ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:56.lprng.asc

Related Vulnerabilities

CVE-2000-003210.0

Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.

CVE-2000-037010.0

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for ...

CVE-2000-000210.0

Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.

CVE-2000-035210.0

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitra...