Every CVE Search/ Get API key

CVE-2000-0881

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to...

2.1 LowPublic exploit

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.

Exploit likelihood

0.87%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.

Record
CVE-2000-0881
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.

Record
CVE-2000-0881
Updated
2026-11-02
EUVDEUVD-2000-0868 No score

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.

Record
EUVD-2000-0868
Updated
2026-11-03
GitHub AdvisoriesGHSA-mhr6-m9pw-wprq No score

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to...

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.

Record
GHSA-mhr6-m9pw-wprq
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLPPlus 3.2.2/3.3 - dccscan Unprivileged read2000-09-06

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0881 is a low vulnerability (CVSS 2.1) in Plus Technologies Lpplus, published October 18, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.87%, the 58th percentile. No source names a fixed version.

References

MoveEnter Open