CVE-2001-1583

 

Published at: - 31-12-2001 06:00

Last modified: - 13-09-2022 08:47

Total changes: - 2

Description

lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• 20010831 Solaris LPD Exploit (fwd)-Mailing List, Third Party Advisory
• 20010829 solaris lpd, KARMAPOLICE?-Broken Link
• http://metasploit.com/projects/Framework/modules/exploits/solaris_lpd_exec.pm
• 3274-Exploit, Third Party Advisory, VDB Entry
• 15131-Broken Link
• solaris-lpd-sendmail-commands(7087)-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2001-1583

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures