CVE Vulnerabilities

CVE-2000-1221

Published: Jan 08, 2000 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.

Affected Software

Name Vendor Start Version End Version
Irix Sgi 6.5.16m 6.5.16m
Irix Sgi 6.5.6 6.5.6
Irix Sgi 6.5.17f 6.5.17f
Irix Sgi 6.5.1 6.5.1
Irix Sgi 6.5.14f 6.5.14f
Irix Sgi 6.5.10 6.5.10
Irix Sgi 6.5.12 6.5.12
Irix Sgi 6.5.15f 6.5.15f
Irix Sgi 6.5.18f 6.5.18f
Irix Sgi 6.5.9 6.5.9
Irix Sgi 6.5.16f 6.5.16f
Irix Sgi 6.5.17m 6.5.17m
Irix Sgi 6.5.14m 6.5.14m
Irix Sgi 6.5.3 6.5.3
Irix Sgi 6.5.8 6.5.8
Irix Sgi 6.5.5 6.5.5
Irix Sgi 6.5.4 6.5.4
Irix Sgi 6.5.15m 6.5.15m
Irix Sgi 6.5.11 6.5.11
Irix Sgi 6.5.2 6.5.2
Irix Sgi 6.5 6.5
Irix Sgi 6.5.7 6.5.7
Irix Sgi 6.5.18m 6.5.18m
Irix Sgi 6.5.13 6.5.13

References