CVEvulnerability

CVE-2007-5381

9.3 HIGH Published 2007-10-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-10-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to the LPD from a source port other than 515.

Affected configurations

• cisco ios 10.3 • cisco ios 10.3\(3.3\) • cisco ios 10.3\(3.4\) • cisco ios 10.3\(4.2\) • cisco ios 10.3\(4.3\) • cisco ios 10.3\(16\) • cisco ios 10.3\(19a\) • cisco ios 11 • cisco ios 11.0 • cisco ios 11.0\(12\) • cisco ios 11.0\(17\) • cisco ios 11.0\(17\)bt • cisco ios 11.0\(18\) • cisco ios 11.0\(20.3\) • cisco ios 11.0\(22a\) • cisco ios 11.0\(22b\) • cisco ios 11.0\(x\) • cisco ios 11.0.12\(a\)bt • cisco ios 11.1 • cisco ios 11.1\(5\) • cisco ios 11.1\(7\) • cisco ios 11.1\(7\)aa • cisco ios 11.1\(7\)ca • cisco ios 11.1\(9\)ia • cisco ios 11.1\(11\) • cisco ios 11.1\(12\) • cisco ios 11.1\(13\) • cisco ios 11.1\(13\)aa • cisco ios 11.1\(13\)ca • cisco ios 11.1\(13\)ia • cisco ios 11.1\(14\) • cisco ios 11.1\(15\) • cisco ios 11.1\(15\)aa • cisco ios 11.1\(15\)ca • cisco ios 11.1\(15\)ia • cisco ios 11.1\(16\) • cisco ios 11.1\(16\)aa • cisco ios 11.1\(16\)ia • cisco ios 11.1\(17\) • cisco ios 11.1\(17\)cc • cisco ios 11.1\(17\)ct • cisco ios 11.1\(18\) • cisco ios 11.1\(20\)aa4 • cisco ios 11.1\(22\) • cisco ios 11.1\(24\) • cisco ios 11.1\(24a\) • cisco ios 11.1\(24b\) • cisco ios 11.1\(24c\) • cisco ios 11.1\(28a\)ct • cisco ios 11.1\(28a\)ia • cisco ios 11.1\(36\)ca2 • cisco ios 11.1\(36\)ca4 • cisco ios 11.1\(36\)cc2 • cisco ios 11.1\(36\)cc4 • cisco ios 11.1aa • cisco ios 11.1ca • cisco ios 11.1cc • cisco ios 11.1ct • cisco ios 11.1ia • cisco ios 11.2 … and 1369 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References