CVE-2000-1221 The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server a...
HighCVSS 10.0
EPSS 16.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi irix | = 6.5 | No fix listed |
| sgi irix | = 6.5.1 | No fix listed |
| sgi irix | = 6.5.2 | No fix listed |
| sgi irix | = 6.5.3 | No fix listed |
| sgi irix | = 6.5.4 | No fix listed |
| sgi irix | = 6.5.5 | No fix listed |
| sgi irix | = 6.5.6 | No fix listed |
| sgi irix | = 6.5.7 | No fix listed |
| sgi irix | = 6.5.8 | No fix listed |
| sgi irix | = 6.5.9 | No fix listed |
| sgi irix | = 6.5.10 | No fix listed |
| sgi irix | = 6.5.11 | No fix listed |
| sgi irix | = 6.5.12 | No fix listed |
| sgi irix | = 6.5.13 | No fix listed |
| sgi irix | = 6.5.14f | No fix listed |
| sgi irix | = 6.5.14m | No fix listed |
| sgi irix | = 6.5.15f | No fix listed |
| sgi irix | = 6.5.15m | No fix listed |
| sgi irix | = 6.5.16f | No fix listed |
| sgi irix | = 6.5.16m | No fix listed |
| sgi irix | = 6.5.17f | No fix listed |
| sgi irix | = 6.5.17m | No fix listed |
| sgi irix | = 6.5.18f | No fix listed |
| sgi irix | = 6.5.18m | No fix listed |
| debian linux | = 2.1 | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat linux | = 4.1 | No fix listed |
| redhat linux | = 4.2 | No fix listed |
| redhat linux | = 5.0 | No fix listed |
| redhat linux | = 5.2 | No fix listed |
| redhat linux | = 6.0 | No fix listed |
| redhat linux | = 6.1 | No fix listed |
| debian/lpr(Debian:12) | < 1:0.48-1 | 1:0.48-1 |
| debian/lpr(Debian:14) | < 1:0.48-1 | 1:0.48-1 |
| debian/lpr(Debian:13) | < 1:0.48-1 | 1:0.48-1 |
References
- RHSA-2000:002 vendor-advisory
- A010800-v vendor-advisory
- 20000109 lpr -- access control problem and root exploit patch vendor-advisory
- VU#30308 third-party-advisory us-government-resource
- 20000108 Quadruple Inverted Backflip vendor-advisory
- 927 vdb-entry
- redhat-lpd-auth(3840) vdb-entry
- Debian Security Tracker CVE-2000-1221 vendor-advisory