vulnwire
10.0crit

CVE-2000-1220in critical feed1 exploit

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing…

Published 26 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
14.2%
percentile 97%
Public exploits
1
Exploit-DB

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

Exploit prediction (EPSS)

14.22% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-325 BSD / Linux - 'lpr' Local Privilege Escalation · local · 1996-10-25

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • debian.org /security/2000/20000109 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • seclists.org /lists/bugtraq/2000/Jan/0116.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/927 · vdb-entry, x_refsource_BID, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/3841 · vdb-entry, x_refsource_XF, x_transferred
  • l0pht.com /advisories/lpd_advisory · vendor-advisory, x_refsource_L0PHT, x_transferred
  • kb.cert.org /vuls/id/39001 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • redhat.com /support/errata/RHSA-2000-002.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • atstake.com /research/advisories/2000/lpd_advisory.txt · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.