CVE-2001-0353

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/206
http://www.cert.org/advisories/CA-2001-15.htmlUS Government Resource
http://www.securityfocus.com/bid/2894
http://xforce.iss.net/alerts/advise80.phpPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6718
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/206
http://www.cert.org/advisories/CA-2001-15.htmlUS Government Resource
http://www.securityfocus.com/bid/2894
http://xforce.iss.net/alerts/advise80.phpPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6718

Timeline

Published: Jul 21, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-03545.0TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on CVE-2001-03555.0Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies.CVE-2001-03577.5FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message param CVE-2001-03587.5Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a long map command, (2)CVE-2001-03597.5Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map comman CVE-2001-03605.0Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. (dot CVE-2001-03614.0Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain c CVE-2001-03645.0SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous co CVE-2001-03657.5Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content CVE-2001-03667.2saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, wh CVE-2001-03675.0Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a CVE-2001-03685.0Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a serie