LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lpplus | Plus_technologies | 3.2.2 (including) | 3.2.2 (including) |
| Lpplus | Plus_technologies | 3.3 (including) | 3.3 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html
- http://www.securityfocus.com/bid/1643
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5199
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html
- http://www.securityfocus.com/bid/1643
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5199