CVE-2000-0880

LowCVSS 3.6/10Last modified Jun 16, 2026

Description

LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.

Metrics

CVSS 2.0 3.6/10AV:L/AC:L/Au:N/C:N/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-08812.1The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan,CVE-2000-08825.0Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to CVE-2000-08835.0The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, CVE-2000-08847.5IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URCVE-2000-08857.5Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFCVE-2000-08867.5IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with opeCVE-2000-08875.0named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request CVE-2000-08885.0named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srvCVE-2000-08895.1Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appearCVE-2000-08901.2periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink aCVE-2000-08917.5A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email CVE-2000-08922.6Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or
CVE-2000-0880: Low severity, CVSS 3.6 | Vulnix