CVE-2000-1220

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

14.22% chance of exploitation in the next 30 days, 96th percentile

Published

2005-04-21

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://www.debian.org/security/2000/20000109

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/325

References

• CVE Record
• NVD entry

Related

• CVE-2000-1209
• CVE-2000-1221
• CVE-2000-1199
• CVE-2000-1224
• CVE-2000-1198
• CVE-2000-1228