CVE-2000-1220
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.2%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 14.22% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- sgi/irix · redhat/linux
- Source
- cve@mitre.org
References
- ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P
- http://seclists.org/lists/bugtraq/2000/Jan/0116.html
- http://www.atstake.com/research/advisories/2000/lpd_advisory.txt
- http://www.debian.org/security/2000/20000109
- http://www.kb.cert.org/vuls/id/39001US Government Resource
- http://www.l0pht.com/advisories/lpd_advisory
- http://www.redhat.com/support/errata/RHSA-2000-002.html
- http://www.securityfocus.com/bid/927
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3841
- ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P
- http://seclists.org/lists/bugtraq/2000/Jan/0116.html
- http://www.atstake.com/research/advisories/2000/lpd_advisory.txt
- http://www.debian.org/security/2000/20000109
- http://www.kb.cert.org/vuls/id/39001US Government Resource
- http://www.l0pht.com/advisories/lpd_advisory
- http://www.redhat.com/support/errata/RHSA-2000-002.html
- http://www.securityfocus.com/bid/927
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3841
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.