CVE-2001-1583 lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail pr...
HighCVSS 10.0
EPSS 83.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sunos | <= 5.9 | No fix listed |
References
- 20010831 Solaris LPD Exploit (fwd) mailing-list third-party-advisory
- metasploit.com broken-link
- 20010829 solaris lpd, KARMAPOLICE? broken-link mailing-list
- 15131 broken-link vdb-entry
- 3274 exploit third-party-advisory vdb-entry
- solaris-lpd-sendmail-commands(7087) third-party-advisory vdb-entry