Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2004-0454: rlpr daemon on Debian lets local user run code
CVE-2004-0454 · published 21 years ago
Summary
The rlpr service (rlprd) version 2.04 on Debian has a coding error that lets anyone with local access run any program they choose. This could let an attacker gain control of the server. Update to a patched version of rlpr or restrict who can run the daemon until a fix is applied.
What to do
- Update debian rlpr to version 2.02-7.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | rlpr |
< 2.02-7.1 Fix: upgrade to 2.02-7.1
|
| Debian:13 | debian | rlpr |
< 2.02-7.1 Fix: upgrade to 2.02-7.1
|
| Debian:14 | debian | rlpr |
< 2.02-7.1 Fix: upgrade to 2.02-7.1
|
| – | rlpr | rlpr |
2.0 2.0.1 2.0.2 2.0.3 2.0.4 cpe:2.3:a:rlpr:rlpr:2.0:*:*:*:*:*:*:* |
Original advisory text
Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code.
Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code.
References
- https://security-tracker.debian.org/tracker/CVE-2004-0454 Vendor Advisory
- http://www.debian.org/security/2004/dsa-524 Patch Vendor Advisory
- http://www.securityfocus.com/bid/10578 Exploit Patch Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16454
Severity
7.2
High
Timeline
Published6 Dec 2004
Updated4 Nov 2026
First seen15 Sep 2026
Track software like this
Free during beta