Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

AUSCERT:AA-96.12 | BID:707 | URL:http://www.securityfocus.com/bid/707 | BUGTRAQ:19960813 Possible bufferoverflow condition in lpr, xterm and xload | BUGTRAQ:19961025 Linux & BSD's lpr exploit | CERT:CA-97.19.bsdlp | CIAC:H-08 | CIAC:I-042 | URL:http://www.ciac.org/ciac/bulletins/i-042.shtml | MLIST:[freebsd-security] 19961025 Vadim Kolontsov: BoS: Linux & BSD's lpr exploit | MLIST:[linux-security] 19961122 LSF Update#14: Vulnerability of the lpr program. | SGI:19980402-01-PX | URL:ftp://patches.sgi.com/support/free/security/advisories/19980402-01-PX | XF:bsd-lprbo | XF:bsd-lprbo2 | XF:lpr-bo