NetSight
IP …
critical10.0Public exploit code

CVE-2000-1220

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

Affected products

VendorProductAffected versions
SgiIrix
Versions 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5
RedhatLinux
Versions 4.0, 4.1, 4.2, 5.0, 5.1, 5.2

References