CVE-2000-1208

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-08-12 · updated 2026-06-16

Description

Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.

Affected products

Immunix: 6.2
Netbsd: 1.4, 1.4.1, 1.4.2
OpenBSD: 2.7
RedHat Linux: 7.0

References

http://marc.info/?l=bugtraq&m=96994604300675&w=2
http://online.securityfocus.com/archive/1/137555
http://www.iss.net/security_center/static/5286.php
http://www.redhat.com/support/errata/RHSA-2000-066.html
http://www.securityfocus.com/bid/1711
http://marc.info/?l=bugtraq&m=96994604300675&w=2
http://online.securityfocus.com/archive/1/137555
http://www.iss.net/security_center/static/5286.php
http://www.redhat.com/support/errata/RHSA-2000-066.html
http://www.securityfocus.com/bid/1711

Get alerted when CVE-2000-1208 or the next vulnerability affects your stack