CVE-2000-0317

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-04/0192.htmlExploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-04/0236.htmlVendor Advisory
http://marc.info/?l=bugtraq&m=95729763119559&w=2
http://www.securityfocus.com/bid/1138Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-04/0192.htmlExploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-04/0236.htmlVendor Advisory
http://marc.info/?l=bugtraq&m=95729763119559&w=2
http://www.securityfocus.com/bid/1138Exploit, Patch, Vendor Advisory

Timeline

Published: Apr 24, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03187.5Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.CVE-2000-03195.0mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote atta CVE-2000-03205.0Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to ca CVE-2000-03215.0Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.CVE-2000-032210.0The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metachar CVE-2000-03237.6The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.CVE-2000-03245.0pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.CVE-2000-03257.2The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.CVE-2000-03265.0Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt CVE-2000-03277.6Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal c CVE-2000-03285.0Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and sessio CVE-2000-03295.1A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML