CVE:CVE-2000-0917
CNNVD:CNNVD-200012-136
LPRng是Berkeley lpr打印工具的一种实现。
某些Linux系统附带的LPRng程序存在一个格式化串溢出漏洞，远程攻击者可以利用此漏洞通过溢出攻击在主机上以root用户权限执行任意指令。
LPRng编程实现中有一个函数use_syslog()，此函数把用户的输入未加检查就作为一个格式化串传给syslog()函数。远程攻击者可以通过输入一个恶意的格式化串来破坏程序执行流程。在测试中，这个漏洞可被攻击者利用来从远程在主机上以root用户的权限执行任意指令。
有问题的代码部分在：
/LPRng-3.6.22/src/common/errormsg.c， use_syslog()
---
static void use_syslog(int kind， char *msg)
...
# ifdef HAVE_OPENLOG
        /* use the openlog facility */
        openlog(Name， LOG_PID | LOG_NOWAIT， SYSLOG_FACILITY );
        syslog(kind， msg);
        closelog();
# else
    (void) syslog(SYSLOG_FACILITY | kind， msg);
# endif                                                 /* HAVE_OPENLOG */
...
solution:Upgrade caldera openlinux_ebuilder to a higher version than 3.0,and avoid the version 3.0; Upgrade caldera openlinux to a higher version than *; Upgrade caldera openlinux_edesktop to a higher version than 2.4,and avoid the version 2.4; Upgrade caldera openlinux_eserver to a higher version than 2.3,and avoid the version 2.3; Upgrade redhat linux to a higher version than 7.0,and avoid the version 7.0; Upgrade trustix secure_linux to a higher version than 1.0,1.1,and avoid the version 1.0,1.1