CVE-2003-0144

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-03-31 · updated 2026-06-16

Description

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.

Affected products

BSD Lpr: 0.48, 2000-05-07
FreeBSD: 2.2, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6
Lprold: 3.0.48
OpenBSD: 2.0, 2.1, 2.2, 2.3, 2.4, 2.5 (+7)

References

http://marc.info/?l=bugtraq&m=104690434504429&w=2
http://marc.info/?l=bugtraq&m=104714441925019&w=2
http://secunia.com/advisories/8293
http://www.debian.org/security/2003/dsa-267
http://www.debian.org/security/2003/dsa-275
http://www.mandriva.com/security/advisories?name=MDKSA-2003:059
http://www.novell.com/linux/security/advisories/2003_014_lprold.html
http://www.securityfocus.com/bid/7025
https://exchange.xforce.ibmcloud.com/vulnerabilities/11473

Get alerted when CVE-2003-0144 or the next vulnerability affects your stack