VULHUB ™

SCO OpenServer 5 ships with several suid 'bin' executables used in printer administration and related tasks. This includes lpfilter, a component used to create, modify or display filters used with the LP print service. 'lpfilter' contains a confirmed locally exploitable buffer overflow condition present in the handling of command-line parameters. If properly exploited, this can yield user 'bin' privileges to the attacker.

SCO OpenServer 5 ships with several suid 'bin' executables used in printer administration and related tasks. This includes lpfilter, a component used to create, modify or display filters used with the LP print service. 'lpfilter' contains a confirmed locally exploitable buffer overflow condition present in the handling of command-line parameters. If properly exploited, this can yield user 'bin' privileges to the attacker.