CVE-2000-0880 json
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an…
published 2000-10-18 26 y ago modified 2026-06-16 4 mo ago also EUVD-2000-0867
- cvss
- 3.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 55%
- public exploits
- 1
- Exploit-DB
Summary
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.
Timeline
- First public exploit (EDB-20192)
- Published
Exploit prediction
0.74% chance of exploitation in the next 30 days, higher than 55% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-20192 LPPlus 3.2.2/3.3 - Permissions Denial of Service dos, 2000-09-06
- securityfocus.com http://www.securityfocus.com/bid/1643 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 3.6 | AV:L/AC:L/Au:N/C:N/I:P/A:P |
References
-
securityfocus.com
/bid/1643
vdb-entry, exploit, vendor-advisory
-
archives.neohapsis.com
/archives/bugtraq/2000-08/0531.html
mailing-list, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/5200
vdb-entry
Sources
- CVE List CVE-2000-0880
- NVD CVE-2000-0880
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.