National Vulnerability Database (CVE-2002-0378)

National Cyber-Alert System Vulnerability Summary: CVE-2002-0378
Orirignal release date: 2002-07-03 Source: US-CERT/NIST ### Overview The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts. ### Impact CVSS Severity: 7 (High) Range: remote Authentication: config Impact Type: sec_prot ### Reference to Advisories, Solutions, and Tools External Source: Red Hat Name: Relaxed LPRng job submission policy Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-089.html External Source: Security Focus Name: bid 4980 Hyperlink: http://online.securityfocus.com/bid/4980 External Source: MANDRAKE Name: MDKSA-2002:042 Hyperlink: http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-042.php External Source: HP Name: HPSBTL0206-048 Hyperlink: http://online.securityfocus.com/advisories/4205 External Source: XF Name: lprng-remote-jobs-dos(9322) Hyperlink: http://www.iss.net/security_center/static/9322.php External Source: BID Name: 4980 Hyperlink: http://www.securityfocus.com/bid/4980 ### Vulnerable Software and Vendor LPRng (Patrick Powell) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0378