CVE-2000-1208 is a format string vulnerability in the startprinting() function of the lpr lpd package, affecting BSD-based systems like Immunix, NetBSD, OpenBSD, and Red Hat. This flaw allows local users to gain privileges due to improper syslog calls that process format strings from checkremote(). With a CVSS score of 7.2, it is a high-severity vulnerability that can lead to complete compromise of confidentiality, integrity, and availability with low attack complexity. Despite its age, there is no known public exploit code or Metasploit module, and it is not listed in CISA's KEV catalog. However, the vulnerability has garnered significant community discussion, with 10 mentions, indicating ongoing interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.2CPE matchmatch criteria | cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:* | ||
1.4CPE matchmatch criteria | cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:* | ||
1.4.1CPE matchmatch criteria | cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:* | ||
1.4.2CPE matchmatch criteria | cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:* | ||
2.7CPE matchmatch criteria | cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.