CVE-1999-0032

High

Published: 25/10/1996(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.00%

58th percentile - higher than 58% of all known CVEs

Summary

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

Risk Assessment

This vulnerability poses a serious risk as local users can gain unauthorized access to administrator privileges, potentially compromising the system.

Recommendation

It is recommended to update the lpr software to the latest version that fixes this buffer overflow and to restrict access to this tool for unauthorized users.

Other vulnerabilities in lpr

CVE-1999-1102Low
The vulnerability in lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack triggered after invoking lpr 1000 times.

Original NVD description (English source)

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.