CVE-2001-0369

Description

Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name).

Affected products

• digital / unixmu02 – mu02
• digital / unixr4.20mu06 – r4.20mu06

Exploits & proofs of concept

• exploit-dbDG/UX 4.20 lpsched - 'Error Message' Local Buffer Overflowby Luciano Rocha

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/6258
• MAILING_LISThttp://marc.info/?l=bugtraq&m=98511407131984&w=2