Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LPRNG runlpr本地权限提升漏洞
Vulnerability Description
LPRng是一款增强的、扩展的、移植的Berkeley LPR打印作业系统实现,可使用在多种操作系统下。 LPRng中包含的runlpr工具对用户提交的参数缺少正确检查,本地攻击者可以利用这个漏洞以欺骗lpr以'root'用户权限在系统上执行任意命令。 lprng包含的"runlpr"工具存在漏洞允许lp用户以root用户权限执行lpr程序。本地攻击者可以传递包含恶意字符串的命令行参数给以root权限运行的lpr,欺骗lpr以root用户权限执行命令行参数包含的命令。 目前我们还不清楚漏洞详细细节。 <*
CVSS Information
N/A
Vulnerability Type
N/A