CVE-2007-5381 Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on....
HighCVSS 9.3
EPSS 14.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to the LPD from a source port other than 515.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 10.3 | No fix listed |
| cisco ios | = 10.3(3.3) | No fix listed |
| cisco ios | = 10.3(3.4) | No fix listed |
| cisco ios | = 10.3(4.2) | No fix listed |
| cisco ios | = 10.3(4.3) | No fix listed |
| cisco ios | = 10.3(16) | No fix listed |
| cisco ios | = 10.3(19a) | No fix listed |
| cisco ios | = 11 | No fix listed |
| cisco ios | = 11.0 | No fix listed |
| cisco ios | = 11.0(12) | No fix listed |
| cisco ios | = 11.0(17) | No fix listed |
| cisco ios | = 11.0(17)bt | No fix listed |
| cisco ios | = 11.0(18) | No fix listed |
| cisco ios | = 11.0(20.3) | No fix listed |
| cisco ios | = 11.0(22a) | No fix listed |
| cisco ios | = 11.0(22b) | No fix listed |
| cisco ios | = 11.0(x) | No fix listed |
| cisco ios | = 11.0.12(a)bt | No fix listed |
| cisco ios | = 11.1 | No fix listed |
| cisco ios | = 11.1(5) | No fix listed |
| cisco ios | = 11.1(7) | No fix listed |
| cisco ios | = 11.1(7)aa | No fix listed |
| cisco ios | = 11.1(7)ca | No fix listed |
| cisco ios | = 11.1(9)ia | No fix listed |
| cisco ios | = 11.1(11) | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 11.1(12) | No fix listed |
| cisco ios | = 11.1(13) | No fix listed |
| cisco ios | = 11.1(13)aa | No fix listed |
| cisco ios | = 11.1(13)ca | No fix listed |
| cisco ios | = 11.1(13)ia | No fix listed |
| cisco ios | = 11.1(14) | No fix listed |
| cisco ios | = 11.1(15) | No fix listed |
| cisco ios | = 11.1(15)aa | No fix listed |
| cisco ios | = 11.1(15)ca | No fix listed |
| cisco ios | = 11.1(15)ia | No fix listed |
| cisco ios | = 11.1(16) | No fix listed |
| cisco ios | = 11.1(16)aa | No fix listed |
| cisco ios | = 11.1(16)ia | No fix listed |
| cisco ios | = 11.1(17) | No fix listed |
| cisco ios | = 11.1(17)cc | No fix listed |
| cisco ios | = 11.1(17)ct | No fix listed |
| cisco ios | = 11.1(18) | No fix listed |
| cisco ios | = 11.1(20)aa4 | No fix listed |
| cisco ios | = 11.1(22) | No fix listed |
| cisco ios | = 11.1(24) | No fix listed |
| cisco ios | = 11.1(24a) | No fix listed |
| cisco ios | = 11.1(24b) | No fix listed |
| cisco ios | = 11.1(24c) | No fix listed |
| cisco ios | = 11.1(28a)ct | No fix listed |
| cisco ios | = 11.1(28a)ia | No fix listed |
| cisco ios | = 11.1(36)ca2 | No fix listed |
| cisco ios | = 11.1(36)ca4 | No fix listed |
| cisco ios | = 11.1(36)cc2 | No fix listed |
| cisco ios | = 11.1(36)cc4 | No fix listed |
| cisco ios | = 11.1aa | No fix listed |
| cisco ios | = 11.1ca | No fix listed |
| cisco ios | = 11.1cc | No fix listed |
| cisco ios | = 11.1ct | No fix listed |
| cisco ios | = 11.1ia | No fix listed |
| cisco ios | = 11.2 | No fix listed |
| cisco ios | = 11.2(4) | No fix listed |
| cisco ios | = 11.2(4)f | No fix listed |
| cisco ios | = 11.2(4)f1 | No fix listed |
| cisco ios | = 11.2(4)xa | No fix listed |
| cisco ios | = 11.2(4)xaf | No fix listed |
| cisco ios | = 11.2(8) | No fix listed |
| cisco ios | = 11.2(8)p | No fix listed |
| cisco ios | = 11.2(8)sa1 | No fix listed |
| cisco ios | = 11.2(8)sa3 | No fix listed |
| cisco ios | = 11.2(8)sa5 | No fix listed |
| cisco ios | = 11.2(8.9)sa6 | No fix listed |
| cisco ios | = 11.2(9)p | No fix listed |
| cisco ios | = 11.2(9)xa | No fix listed |
| cisco ios | = 11.2(10) | No fix listed |
| cisco ios | = 11.2(10)bc | No fix listed |
| cisco ios | = 11.2(11) | No fix listed |
| cisco ios | = 11.2(11b)t2 | No fix listed |
| cisco ios | = 11.2(14)gs2 | No fix listed |
| cisco ios | = 11.2(15)g | No fix listed |
| cisco ios | = 11.2(15a)p | No fix listed |
| cisco ios | = 11.2(15b) | No fix listed |
| cisco ios | = 11.2(16) | No fix listed |
| cisco ios | = 11.2(16)p | No fix listed |
| cisco ios | = 11.2(17) | No fix listed |
| cisco ios | = 11.2(18) | No fix listed |
| cisco ios | = 11.2(19)gs0.2 | No fix listed |
| cisco ios | = 11.2(19a)gs6 | No fix listed |
| cisco ios | = 11.2(23a)bc1 | No fix listed |
| cisco ios | = 11.2(26)p2 | No fix listed |
| cisco ios | = 11.2(26)p5 | No fix listed |
| cisco ios | = 11.2(26a) | No fix listed |
| cisco ios | = 11.2(26b) | No fix listed |
| cisco ios | = 11.2(26e) | No fix listed |
| cisco ios | = 11.2bc | No fix listed |
| cisco ios | = 11.2f | No fix listed |
| cisco ios | = 11.2gs | No fix listed |
| cisco ios | = 11.2p | No fix listed |
| cisco ios | = 11.2sa | No fix listed |
| cisco ios | = 11.2wa3 | No fix listed |
| cisco ios | = 11.2wa4 | No fix listed |
| cisco ios | = 11.2xa | No fix listed |
| cisco ios | = 11.3 | No fix listed |
| cisco ios | = 11.3(1) | No fix listed |
| cisco ios | = 11.3(1)ed | No fix listed |
| cisco ios | = 11.3(1)t | No fix listed |
| cisco ios | = 11.3(2)xa | No fix listed |
| cisco ios | = 11.3(7)db1 | No fix listed |
| cisco ios | = 11.3(8)db2 | No fix listed |
| cisco ios | = 11.3(8)t1 | No fix listed |
| cisco ios | = 11.3(11)b | No fix listed |
| cisco ios | = 11.3(11b) | No fix listed |
| cisco ios | = 11.3(11b)t2 | No fix listed |
| cisco ios | = 11.3(11c) | No fix listed |
| cisco ios | = 11.3(11d) | No fix listed |
| cisco ios | = 11.3aa | No fix listed |
| cisco ios | = 11.3da | No fix listed |
| cisco ios | = 11.3db | No fix listed |
| cisco ios | = 11.3ha | No fix listed |
| cisco ios | = 11.3ma | No fix listed |
| cisco ios | = 11.3na | No fix listed |
| cisco ios | = 11.3t | No fix listed |
| cisco ios | = 11.3wa4 | No fix listed |
| cisco ios | = 11.3xa | No fix listed |
| cisco ios | = 12.0 | No fix listed |
| cisco ios | = 12.0(1) | No fix listed |
| cisco ios | = 12.0(1)s | No fix listed |
| cisco ios | = 12.0(1)st | No fix listed |
| cisco ios | = 12.0(1)w | No fix listed |
| cisco ios | = 12.0(1)xa3 | No fix listed |
| cisco ios | = 12.0(1)xb | No fix listed |
| cisco ios | = 12.0(1)xe | No fix listed |
| cisco ios | = 12.0(2) | No fix listed |
| cisco ios | = 12.0(2)xc | No fix listed |
| cisco ios | = 12.0(2)xd | No fix listed |
| cisco ios | = 12.0(2)xe | No fix listed |
| cisco ios | = 12.0(2)xf | No fix listed |
| cisco ios | = 12.0(2)xg | No fix listed |
| cisco ios | = 12.0(2a) | No fix listed |
| cisco ios | = 12.0(2b) | No fix listed |
| cisco ios | = 12.0(3) | No fix listed |
| cisco ios | = 12.0(3)t2 | No fix listed |
| cisco ios | = 12.0(3)xe | No fix listed |
| cisco ios | = 12.0(3.2) | No fix listed |
| cisco ios | = 12.0(3.3)s | No fix listed |
| cisco ios | = 12.0(3.4)t | No fix listed |
| cisco ios | = 12.0(3.6)w5(9.0.5) | No fix listed |
| cisco ios | = 12.0(3d) | No fix listed |
| cisco ios | = 12.0(4) | No fix listed |
| cisco ios | = 12.0(4)s | No fix listed |
| cisco ios | = 12.0(4)t | No fix listed |
| cisco ios | = 12.0(4)xe | No fix listed |
| cisco ios | = 12.0(4)xe1 | No fix listed |
| cisco ios | = 12.0(4)xm | No fix listed |
| cisco ios | = 12.0(4)xm1 | No fix listed |
| cisco ios | = 12.0(5) | No fix listed |
| cisco ios | = 12.0(5)s | No fix listed |
| cisco ios | = 12.0(5)t | No fix listed |
| cisco ios | = 12.0(5)t1 | No fix listed |
| cisco ios | = 12.0(5)t2 | No fix listed |
| cisco ios | = 12.0(5)wc | No fix listed |
| cisco ios | = 12.0(5)wc2 | No fix listed |
| cisco ios | = 12.0(5)wc2b | No fix listed |
| cisco ios | = 12.0(5)wc3 | No fix listed |
| cisco ios | = 12.0(5)wc3b | No fix listed |
| cisco ios | = 12.0(05)wc8 | No fix listed |
| cisco ios | = 12.0(5)wc13 | No fix listed |
| cisco ios | = 12.0(5)wx | No fix listed |
| cisco ios | = 12.0(5)xe | No fix listed |
| cisco ios | = 12.0(5)xk | No fix listed |
| cisco ios | = 12.0(5)xk2 | No fix listed |
| cisco ios | = 12.0(5)xn | No fix listed |
| cisco ios | = 12.0(5)xn1 | No fix listed |
| cisco ios | = 12.0(5)xs | No fix listed |
| cisco ios | = 12.0(5)xu | No fix listed |
| cisco ios | = 12.0(5)yb4 | No fix listed |
| cisco ios | = 12.0(5.1)xp | No fix listed |
| cisco ios | = 12.0(5.2)xu | No fix listed |
| cisco ios | = 12.0(5.3)wc1 | No fix listed |
| cisco ios | = 12.0(5.4)wc1 | No fix listed |
| cisco ios | = 12.0(5a)e | No fix listed |
| cisco ios | = 12.0(6) | No fix listed |
| cisco ios | = 12.0(6b) | No fix listed |
| cisco ios | = 12.0(7)db2 | No fix listed |
| cisco ios | = 12.0(7)dc1 | No fix listed |
| cisco ios | = 12.0(7)s1 | No fix listed |
| cisco ios | = 12.0(7)sc | No fix listed |
| cisco ios | = 12.0(7)t | No fix listed |
| cisco ios | = 12.0(7)t2 | No fix listed |
| cisco ios | = 12.0(7)t3 | No fix listed |
| cisco ios | = 12.0(7)wx5(15a) | No fix listed |
| cisco ios | = 12.0(7)xe | No fix listed |
| cisco ios | = 12.0(7)xe2 | No fix listed |
| cisco ios | = 12.0(7)xf | No fix listed |
| cisco ios | = 12.0(7)xf1 | No fix listed |
| cisco ios | = 12.0(7)xk | No fix listed |
| cisco ios | = 12.0(7)xk2 | No fix listed |
| cisco ios | = 12.0(7)xk3 | No fix listed |
| cisco ios | = 12.0(7)xv | No fix listed |
| cisco ios | = 12.0(7.4)s | No fix listed |
| cisco ios | = 12.0(7a) | No fix listed |
References
- 37935 vdb-entry
- 27169 third-party-advisory vendor-advisory
- 20071010 Cisco IOS Line Printer Daemon (LPD) Protocol Stack Overflow vendor-advisory
- www.irmplc.com
- VU#230505 third-party-advisory us-government-resource
- 26001 exploit vdb-entry
- 1018798 vdb-entry
- ADV-2007-3457 vdb-entry
- cisco-ios-lpd-bo(37046) vdb-entry