PatchTheCVElprng vulnerabilities and fixes
Recent CVEs affecting lprng, with upgrade or downgrade steps. 3 tracked.
lprng has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2003-05-05. Highest priority: CVE-2002-0378 (score 51/100).
- CVE-2003-0136 LOW 2.1 MITIGATE psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on th
- CVE-2002-0378 HIGH 7.5 MITIGATE The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and o
- CVE-2000-0615 LOW 2.1 MITIGATE LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and loggin
FAQ
How do I fix lprng vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lprng being exploited right now?
None of the tracked lprng CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lprng CVE should I patch first?
CVE-2002-0378 currently ranks highest (51/100): The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and o.