CVE-2000-0881 json
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan…
published 2000-10-18 26 y ago modified 2026-06-16 4 mo ago also EUVD-2000-0868
- cvss
- 2.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 58%
- public exploits
- 1
- Exploit-DB
Summary
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
Timeline
- First public exploit (EDB-20193)
- Published
Exploit prediction
0.87% chance of exploitation in the next 30 days, higher than 58% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-20193 LPPlus 3.2.2/3.3 - dccscan Unprivileged read local, 2000-09-06
- securityfocus.com http://www.securityfocus.com/bid/1644 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
References
-
securityfocus.com
/bid/1644
vdb-entry, exploit, vendor-advisory
-
archives.neohapsis.com
/archives/bugtraq/2000-08/0531.html
mailing-list, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/5201
vdb-entry
Sources
- CVE List CVE-2000-0881
- NVD CVE-2000-0881
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.