[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253928

 
 

909

 
 

198006

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2000-1220Date: (C)2000-01-08   (M)2023-12-22


The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
6.x
http://www.l0pht.com/advisories/lpd_advisory
http://www.debian.org/security/2000/20000109
20021104-01-P
BID-927
RHSA-2000:002
VU#39001
http://www.atstake.com/research/advisories/2000/lpd_advisory.txt
redhat-lpd-print-control(3841)

CPE    30
cpe:/o:sgi:irix:6.5.17f
cpe:/o:sgi:irix:6.5.15f
cpe:/o:sgi:irix:6.5.3
cpe:/o:sgi:irix:6.5.2
...

© SecPod Technologies