CVE Vulnerabilities

CVE-2000-1221

Published: Jan 08, 2000 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.

Affected Software

Name Vendor Start Version End Version
Irix Sgi 6.5 (including) 6.5 (including)
Irix Sgi 6.5.1 (including) 6.5.1 (including)
Irix Sgi 6.5.2 (including) 6.5.2 (including)
Irix Sgi 6.5.3 (including) 6.5.3 (including)
Irix Sgi 6.5.4 (including) 6.5.4 (including)
Irix Sgi 6.5.5 (including) 6.5.5 (including)
Irix Sgi 6.5.6 (including) 6.5.6 (including)
Irix Sgi 6.5.7 (including) 6.5.7 (including)
Irix Sgi 6.5.8 (including) 6.5.8 (including)
Irix Sgi 6.5.9 (including) 6.5.9 (including)
Irix Sgi 6.5.10 (including) 6.5.10 (including)
Irix Sgi 6.5.11 (including) 6.5.11 (including)
Irix Sgi 6.5.12 (including) 6.5.12 (including)
Irix Sgi 6.5.13 (including) 6.5.13 (including)
Irix Sgi 6.5.14f (including) 6.5.14f (including)
Irix Sgi 6.5.14m (including) 6.5.14m (including)
Irix Sgi 6.5.15f (including) 6.5.15f (including)
Irix Sgi 6.5.15m (including) 6.5.15m (including)
Irix Sgi 6.5.16f (including) 6.5.16f (including)
Irix Sgi 6.5.16m (including) 6.5.16m (including)
Irix Sgi 6.5.17f (including) 6.5.17f (including)
Irix Sgi 6.5.17m (including) 6.5.17m (including)
Irix Sgi 6.5.18f (including) 6.5.18f (including)
Irix Sgi 6.5.18m (including) 6.5.18m (including)

References