CVE-2000-0316: Buffer Overflow
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Solaris 7 lpfrom your environment.Uninstall or remove the lp printing subsystem from Solaris 7 systems if printing functionality is not required.
- Configuration
Disable the lp printing service on affected Solaris 7 systems to prevent exploitation of the long -d option until an official patch is available.
lp (Solaris 7 print service) enabled = false - Compensating control
Restrict local unprivileged user accounts and limit local interactive access to trusted administrators only (remove/disable unneeded local accounts) to reduce risk of local privilege escalation via the lp -d option.
- Operational
Audit system logs for signs of exploitation related to lp and perform incident response (including investigation and remediation) if suspicious activity is found; apply any official vendor remediation when it becomes available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0316?
CVE-2000-0316 is classified as a high severity vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-2000-0316?
To remediate CVE-2000-0316, you should apply the recommended patches provided by the vendor for Solaris 7.
Who is affected by CVE-2000-0316?
CVE-2000-0316 affects users of Solaris 7 and SunOS 5.7 who utilize the lp command with vulnerable configurations.
What is the nature of the vulnerability in CVE-2000-0316?
CVE-2000-0316 involves a buffer overflow in the Solaris 7 lp command that can be exploited by local users.
Can CVE-2000-0316 be exploited remotely?
CVE-2000-0316 cannot be exploited remotely as it requires local access to the system to execute the lp command with the long -d option.