CVEvulnerability

CVE-2000-1220

10.0 HIGH Published 2000-01-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2000-01-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

Affected configurations

• sgi irix 6.5 • sgi irix 6.5.1 • sgi irix 6.5.2 • sgi irix 6.5.3 • sgi irix 6.5.4 • sgi irix 6.5.5 • sgi irix 6.5.6 • sgi irix 6.5.7 • sgi irix 6.5.8 • sgi irix 6.5.9 • sgi irix 6.5.10 • sgi irix 6.5.11 • sgi irix 6.5.12 • sgi irix 6.5.13 • sgi irix 6.5.14f • sgi irix 6.5.14m • sgi irix 6.5.15f • sgi irix 6.5.15m • sgi irix 6.5.16f • sgi irix 6.5.16m • sgi irix 6.5.17f • sgi irix 6.5.17m • sgi irix 6.5.18f • sgi irix 6.5.18m • redhat linux 4.0 • redhat linux 4.1 • redhat linux 4.2 • redhat linux 5.0 • redhat linux 5.1 • redhat linux 5.2 • redhat linux 6.0 • redhat linux 6.1

References