CVE-2000-0880

LowCVSS 3.6/10Last modified Jun 16, 2026

Description

LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.

Metrics

CVSS 2.0 3.6/10AV:L/AC:L/Au:N/C:N/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.htmlVendor Advisory
http://www.securityfocus.com/bid/1643Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5200
http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.htmlVendor Advisory
http://www.securityfocus.com/bid/1643Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5200

Timeline

Published: Nov 14, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-08812.1The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan,CVE-2000-08825.0Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to CVE-2000-08835.0The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, CVE-2000-08847.5IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed UR CVE-2000-08857.5Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIF CVE-2000-08867.5IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with ope CVE-2000-08875.0named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request CVE-2000-08885.0named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv CVE-2000-08895.1Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear CVE-2000-08901.2periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink a CVE-2000-08917.5A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email CVE-2000-08922.6Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or