p PatchFirst

CVE-2000-1221

CVE-2000-1221

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.

EPSS 16.7% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • lpr Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:0.48-1

    Update to 1:0.48-1

  • lpr Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:0.48-1

    Update to 1:0.48-1

  • lpr Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:0.48-1

    Update to 1:0.48-1

Original sources

Check your server →