CVE-2000-1220

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

14.22% chance of exploitation in the next 30 days, 97th percentile

Published

2005-04-21

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/325

Security advisories

• http://www.kb.cert.org/vuls/id/39001
• http://www.redhat.com/support/errata/RHSA-2000-002.html
• http://www.securityfocus.com/bid/927

References

• CVE Record
• NVD entry