CVE-2000-1208

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=96994604300675&w=2
http://online.securityfocus.com/archive/1/137555
http://www.iss.net/security_center/static/5286.phpPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2000-066.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1711
http://marc.info/?l=bugtraq&m=96994604300675&w=2
http://online.securityfocus.com/archive/1/137555
http://www.iss.net/security_center/static/5286.phpPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2000-066.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1711

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-120910.0The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) CVE-2000-12105.0Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot do CVE-2000-12117.5Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects CVE-2000-12125.0Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editin CVE-2000-12137.5ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after CVE-2000-12144.6Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J CVE-2000-12155.0The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP h CVE-2000-12167.2Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.CVE-2000-12174.6Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when creden CVE-2000-12189.8The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to CVE-2000-12197.5The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vu CVE-2000-122010.0The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing s