vulnwire
10.0crit

CVE-2000-1221in critical feed1 exploit

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostna…

Published 26 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
16.7%
percentile 97%
Public exploits
1
Exploit-DB

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.

Exploit prediction (EPSS)

16.73% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-19722 RedHat 6.1 / IRIX 6.5.18 - 'lpd' Command Execution · remote · 2000-01-11

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • debian.org /security/2000/20000109 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • atstake.com /research/advisories/2000/lpd_advisory.txt · vendor-advisory, x_refsource_ATSTAKE, x_transferred
  • securityfocus.com /bid/927 · vdb-entry, x_refsource_BID, x_transferred
  • rhn.redhat.com /errata/RHSA-2000-002.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • kb.cert.org /vuls/id/30308 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • l0pht.com /advisories/lpd_advisory · vendor-advisory, x_refsource_L0PHT, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/3840 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.