Vulnerability in Sgi Irix
CVE-2000-1220
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
EPSS: 0.142 (96.2th percentile) — read the EPSS interpretation.
Affected products
- Sgi Irix — versions 6.5, 6.5.1, 6.5.2
- Redhat Linux — versions 4.0, 4.1, 4.2
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_L0PHT, vendor-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_MISC)
Frequently asked questions
- What is CVE-2000-1220?
- CVE-2000-1220 is a vulnerability in Sgi Irix. Published 2000-01-08.
- Is CVE-2000-1220 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.