UnratedFix available
lpr — security advisory
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
- Products
- lpr
- Affected versions
- Not specified
- Fixed versions
- 1:2000.05.07-4.20
- CVEs
- CVE-2003-0144
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 20:13 UTC · Revision 1
Source evidence
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
osv:DEBIAN-CVE-2003-0144
lpr
Fixed versions: 1:2000.05.07-4.20
lpr
Fixed versions: 1:2000.05.07-4.20
lpr
Fixed versions: 1:2000.05.07-4.20
Complete source record
{
"id": "93304d1e553c1825efbce8177c80fc143dfb967b17c81550f588961ae3803f53",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2003-0144",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2003-0144",
"summary": "Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.",
"evidence": "osv:DEBIAN-CVE-2003-0144",
"products": [
{
"name": {
"value": "lpr",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:2000.05.07-4.20",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "lpr",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:2000.05.07-4.20",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "lpr",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:2000.05.07-4.20",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2003-0144",
"aliases": [
"DEBIAN-CVE-2003-0144"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2000.05.07-4.20"
}
]
}
],
"package": {
"name": "lpr",
"purl": "pkg:deb/debian/lpr?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2003-0144.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2000.05.07-4.20"
}
]
}
],
"package": {
"name": "lpr",
"purl": "pkg:deb/debian/lpr?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2003-0144.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2000.05.07-4.20"
}
]
}
],
"package": {
"name": "lpr",
"purl": "pkg:deb/debian/lpr?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2003-0144.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-22T23:47:24.930754399Z",
"provider": "osv",
"upstream": [
"CVE-2003-0144"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2003-0144"
]
},
"related_cves": [
{
"value": "CVE-2003-0144",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 410467,
"published_at": "2003-03-31T05:00:00+00:00"
}