CVE-2000-0879: LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid roo...

Security readout for executives and security teams

LPPlus, a print management product, shipped several helper programs with permissions that let any logged-in user run them as the root administrator. Because those programs start and stop print services, a regular employee on the system could interrupt printing for the whole organization. The issue is limited to people who already have a local account on the affected server, not internet attackers. Exposure is limited to hosts running LPPlus with the original setuid/world-executable permissions and where untrusted users hold local shell access. Modern environments are unlikely to run this legacy print stack. Anyone with an interactive account on such a system could trigger the flaw; remote unauthenticated attackers cannot reach it directly. Low priority. This is a 25-year-old local denial-of-service issue in a niche legacy print product. Address it only if LPPlus is still in production; otherwise treat it as background hygiene during normal legacy system retirement planning. It does not warrant emergency change activity. Mitigation focus: Inventory hosts for any remaining LPPlus installations and confirm current print stack in use.; Consult the LPPlus vendor for supported patches or hardened permission guidance.; Restrict the six named binaries to root-only execution where operationally acceptable..

Prepared

Jul 12, 2026, 00:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.