CVE-2007-5381

Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to the LPD from a source port other than 515.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

14.68% chance of exploitation in the next 30 days, 96th percentile

Published

2007-10-12

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30652

References

• CVE Record
• NVD entry

Related

• CVE-2007-5374
• CVE-2007-5386
• CVE-2007-5370
• CVE-2007-5387
• CVE-2007-5365
• CVE-2007-5388