CVE-2000-1220

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-01-08 · updated 2026-06-16

Description

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

Affected products

RedHat Linux: 4.0, 4.1, 4.2, 5.0, 5.1, 5.2 (+2)
Sgi Irix: 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5 (+18)

References

http://seclists.org/lists/bugtraq/2000/Jan/0116.html
http://www.atstake.com/research/advisories/2000/lpd_advisory.txt
http://www.debian.org/security/2000/20000109
http://www.kb.cert.org/vuls/id/39001
http://www.l0pht.com/advisories/lpd_advisory
http://www.redhat.com/support/errata/RHSA-2000-002.html
http://www.securityfocus.com/bid/927
https://exchange.xforce.ibmcloud.com/vulnerabilities/3841
http://seclists.org/lists/bugtraq/2000/Jan/0116.html
http://www.atstake.com/research/advisories/2000/lpd_advisory.txt

Get alerted when CVE-2000-1220 or the next vulnerability affects your stack