NetSight
IP …
critical9.3Public exploit code

CVE-2007-5381

Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to the LPD from a source port other than 515.

Affected products

VendorProductAffected versions
CiscoIos
Versions 10.3, 10.3\(3.3\), 10.3\(3.4\), 10.3\(4.2\), 10.3\(4.3\), 10.3\(16\)

Weakness classification

CWE-119

References