Detections
Analytics
CVE-2000-1221
high
Description
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/3840
http://www.securityfocus.com/bid/927
http://www.l0pht.com/advisories/lpd_advisory
http://www.kb.cert.org/vuls/id/30308
http://www.debian.org/security/2000/20000109
http://www.atstake.com/research/advisories/2000/lpd_advisory.txt