CVE-2000-0880

Severity: low (CVSS 3.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-11-14 · updated 2026-06-16

Description

LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.

Affected products

Plus Technologies Lpplus: 3.2.2, 3.3

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html
http://www.securityfocus.com/bid/1643
https://exchange.xforce.ibmcloud.com/vulnerabilities/5200
http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html
http://www.securityfocus.com/bid/1643
https://exchange.xforce.ibmcloud.com/vulnerabilities/5200

Get alerted when CVE-2000-0880 or the next vulnerability affects your stack