CVE-2000-1220
HighExploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the system with administrator privileges, posing a serious security threat to the organization.
Recommendation
It is recommended to update the lpr package to the latest version and restrict access to the lpd daemon only to trusted users.
Original NVD description (English source)
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.