CVE Vulnerabilities

CVE-2000-1220

Published: Jan 08, 2000 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

Affected Software

Name Vendor Start Version End Version
Irix Sgi 6.5 6.5
Irix Sgi 6.5.1 6.5.1
Irix Sgi 6.5.2 6.5.2
Irix Sgi 6.5.3 6.5.3
Irix Sgi 6.5.4 6.5.4
Irix Sgi 6.5.5 6.5.5
Irix Sgi 6.5.6 6.5.6
Irix Sgi 6.5.7 6.5.7
Irix Sgi 6.5.8 6.5.8
Irix Sgi 6.5.9 6.5.9
Irix Sgi 6.5.10 6.5.10
Irix Sgi 6.5.11 6.5.11
Irix Sgi 6.5.12 6.5.12
Irix Sgi 6.5.13 6.5.13
Irix Sgi 6.5.14f 6.5.14f
Irix Sgi 6.5.14m 6.5.14m
Irix Sgi 6.5.15f 6.5.15f
Irix Sgi 6.5.15m 6.5.15m
Irix Sgi 6.5.16f 6.5.16f
Irix Sgi 6.5.16m 6.5.16m
Irix Sgi 6.5.17f 6.5.17f
Irix Sgi 6.5.17m 6.5.17m
Irix Sgi 6.5.18f 6.5.18f
Irix Sgi 6.5.18m 6.5.18m

References