Vulnerability Description
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sun | Sunos | <= 5.9 |
Related Weaknesses (CWE)
References
- http://marc.info/?l=bugtraq&m=99929694701826&w=2Mailing ListThird Party Advisory
- http://metasploit.com/projects/Framework/modules/exploits/solaris_lpd_exec.pmBroken Link
- http://www.derkeiler.com/Mailing-Lists/securityfocus/incidents/2001-08/0490.htmlBroken Link
- http://www.osvdb.org/15131Broken Link
- http://www.securityfocus.com/bid/3274ExploitThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7087Third Party AdvisoryVDB Entry
- http://marc.info/?l=bugtraq&m=99929694701826&w=2Mailing ListThird Party Advisory
- http://metasploit.com/projects/Framework/modules/exploits/solaris_lpd_exec.pmBroken Link
- http://www.derkeiler.com/Mailing-Lists/securityfocus/incidents/2001-08/0490.htmlBroken Link
- http://www.osvdb.org/15131Broken Link
- http://www.securityfocus.com/bid/3274ExploitThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7087Third Party AdvisoryVDB Entry
FAQ
What is CVE-2001-1583?
CVE-2001-1583 is a vulnerability with a CVSS score of 10.0 (HIGH). lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail pr...
How severe is CVE-2001-1583?
CVE-2001-1583 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2001-1583?
Check the references section above for vendor advisories and patch information. Affected products include: Sun Sunos.