CVE-2000-0880: LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbit...

Security readout for executives and security teams

LPPlus, a print management product, saved a control file with permissions that let any local user modify it. By changing the process ID stored inside, a low-privileged user could trick a privileged helper program into killing other processes on the same system, disrupting print services or other applications running on that host. Exposure is limited to legacy Unix hosts still running LPPlus (a DCC/PlusOne print system) where local shell users exist. Modern environments almost certainly do not run this software. NVD/CVE lists no specific vendor or version metadata, indicating the affected footprint is small and historical. Low priority. This is a 25-year-old local denial-of-service issue in a niche legacy print product. Impact only matters if the organization still runs LPPlus on multi-user Unix hosts. Address opportunistically during legacy system reviews rather than as an urgent patch. Mitigation focus: Contact the LPPlus/DCC vendor for a supported patch or upgrade path.; Restrict permissions on lpdprocess so only the print service account can write to it.; Remove the setuid bit from dcclpdshut if the vendor confirms it is safe..

Prepared

Jul 12, 2026, 00:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.