CVE

Id
2788  
CVE No.
CVE-2000-1221  
Status
Candidate  
Description
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.  
Phase
Assigned (20050421)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
11208 2788 CVE-2000-1221 ATSTAKE:A010800-v  View
11209 2788 CVE-2000-1221 URL:http://www.atstake.com/research/advisories/2000/lpd_advisory.txt  View
11210 2788 CVE-2000-1221 L0PHT:20000108 Quadruple Inverted Backflip  View
11211 2788 CVE-2000-1221 URL:http://www.l0pht.com/advisories/lpd_advisory  View
11212 2788 CVE-2000-1221 DEBIAN:20000109 lpr -- access control problem and root exploit  View
11213 2788 CVE-2000-1221 URL:http://www.debian.org/security/2000/20000109  View
11214 2788 CVE-2000-1221 REDHAT:RHSA-2000:002  View
11215 2788 CVE-2000-1221 URL:http://rhn.redhat.com/errata/RHSA-2000-002.html  View
11216 2788 CVE-2000-1221 SGI:20021104-01-P  View
11217 2788 CVE-2000-1221 URL:ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P  View
11218 2788 CVE-2000-1221 CERT-VN:VU#30308  View
11219 2788 CVE-2000-1221 URL:http://www.kb.cert.org/vuls/id/30308  View
11220 2788 CVE-2000-1221 BID:927  View
11221 2788 CVE-2000-1221 URL:http://www.securityfocus.com/bid/927  View
11222 2788 CVE-2000-1221 XF:redhat-lpd-auth(3840)  View

Related JVN