Exploit RedHat 6.1 / IRIX 6.5.18 - 'lpd' Command Execution

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
19722
Проверка EDB
  1. Пройдено
Автор
ANONYMOUS
Тип уязвимости
REMOTE
Платформа
UNIX
CVE
cve-2000-1221
Дата публикации
2000-01-11
RedHat 6.1 / IRIX 6.5.18 - 'lpd' Command Execution
Код:
source: https://www.securityfocus.com/bid/927/info

Multiple vulnerabilities have been discovered in lpd, shipped with various Linux and Unix distributions.

It has been reported that lpd fails to properly authenticate hostnames. This could allow an unauthenticated user to gain access to lpd services by supplying a spoofed hostname.

It is also possible for a local user to pass arguments to sendmail, through the vulnerable print daemon. This could allow an unauthorized user to execute commands with elevated privileges.

By exploiting multiple vulnerabilities in lpd, it may be possible for a remote attacker to gain root privileges on a target server.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19722.tgz
 
Источник
www.exploit-db.com

Похожие темы