CVE-2000-1221
HighExploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server. This allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
Risk Assessment
Attackers may gain unauthorized access to printer resources, potentially leading to data leakage or unauthorized printing.
Recommendation
It is recommended to implement additional authorization mechanisms and to monitor and secure DNS configurations to prevent modifications by malicious entities.
Original NVD description (English source)
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.