PatchTheCVErlpr vulnerabilities and fixes
Recent CVEs affecting rlpr, with upgrade or downgrade steps. 2 tracked.
rlpr has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-12-06. Highest priority: CVE-2004-0393 (score 64/100).
- CVE-2004-0454 HIGH 7.2 DOWNGRADE Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code.
- CVE-2004-0393 HIGH 10.0 DOWNGRADE Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execu
FAQ
How do I fix rlpr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rlpr being exploited right now?
None of the tracked rlpr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rlpr CVE should I patch first?
CVE-2004-0393 currently ranks highest (64/100): Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execu.