Severity: 1/4

Consequences: denial of service of service

Provenance: user shell

Means of attack: no proof of concept, no attack

Ability of attacker: expert (4/4)

Confidence: confirmed by the editor (5/5)

Diffusion of the vulnerable configuration: high (3/3)

Creation date: 16/06/2009

IMPACTED PRODUCTS

 OpenSolaris
 Sun Solaris

DESCRIPTION OF THE VULNERABILITY

The lp command is used to print a file.

A local attacker can use the lp command to cancel print jobs owned by root.

Technical details are unknown.

CHARACTERISTICS

Identifiers: 247386, 6759604, VIGILANCE-VUL-8803

http://vigilance.fr/vulnerability/Solaris-denial-of-service-via-lp-8803