CVE-1999-0032

CVE-1999-0032 describes a buffer overflow vulnerability in the lpr utility found in BSD-based systems, including Linux, BSD/OS, FreeBSD, NeXTstep, IRIX, and SunOS. This flaw allows a local attacker to execute arbitrary code with root privileges by providing an excessively long classification option (-C) to the lpr command. The vulnerability is rated as High severity (CVSS 7.2), indicating a high potential for complete compromise of confidentiality, integrity, and availability with low attack complexity. While not listed on the KEV catalog or Hot List, exploit code for this vulnerability is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.