CVE-1999-0032

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 1996-10-25 · updated 2026-06-16

Description

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

Affected products

Bsdi Bsd Os: 2.1
FreeBSD: 2.0, 2.0.5, 2.1.0, 2.1.5
Nextstep: 4.0, 4.1
Sgi Irix: 5.0, 5.0.1, 5.1, 5.1.1, 5.2, 5.3 (+6)
Sunos: 4.1.3u1, 4.1.4

References

http://www.ciac.org/ciac/bulletins/i-042.shtml
http://www.securityfocus.com/bid/707
http://www.ciac.org/ciac/bulletins/i-042.shtml
http://www.securityfocus.com/bid/707

Get alerted when CVE-1999-0032 or the next vulnerability affects your stack