Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Solaris | Sun | 2.6 (including) | 2.6 (including) |
| Sunos | Sun | 5.5.1 (including) | 5.5.1 (including) |
| Sunos | Sun | 5.7 (including) | 5.7 (including) |