Description
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.
Metrics
CVSS 2.0 10.0/10
AV:N/AC:L/Au:N/C:C/I:C/A:CWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://marc.info/?l=bugtraq&m=99929694701826&w=2Mailing List, Third Party Advisory
- http://metasploit.com/projects/Framework/modules/exploits/solaris_lpd_exec.pmBroken Link
- http://www.derkeiler.com/Mailing-Lists/securityfocus/incidents/2001-08/0490.htmlBroken Link
- http://www.osvdb.org/15131Broken Link
- http://www.securityfocus.com/bid/3274Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7087Third Party Advisory, VDB Entry
- http://marc.info/?l=bugtraq&m=99929694701826&w=2Mailing List, Third Party Advisory
- http://metasploit.com/projects/Framework/modules/exploits/solaris_lpd_exec.pmBroken Link
- http://www.derkeiler.com/Mailing-Lists/securityfocus/incidents/2001-08/0490.htmlBroken Link
- http://www.osvdb.org/15131Broken Link
- http://www.securityfocus.com/bid/3274Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7087Third Party Advisory, VDB Entry
Timeline
- Published
- Dec 31, 2001
- Last modified
- Jun 16, 2026
- NVD status
- Modified