Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2001-0670

21
FAUCET Score

CVE-2001-0670 describes a critical buffer overflow vulnerability in the BSD line printer daemon (in.lpd or lpd) affecting various BSD-based operating systems. This flaw allows unauthenticated remote attackers to execute arbitrary code by sending an incomplete print job followed by a printer queue display request. With a CVSS score of 7.5 (HIGH), exploitation is straightforward and can lead to full compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, its high FAUCET Risk Score of 88/100 indicates significant potential impact.

Impacted Technologies

VendorProductVersion(s)CPE
<= 4.1CPE matchmatch criteria
cpe:2.3:o:bsd:bsd:*:*:*:*:*:*:*:*
<= 4.3CPE matchmatch criteria
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
<= 1.5.1CPE matchmatch criteria
cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
6.61%
Probability of exploitation in next 30 days
EPSS Percentile
93.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0661 is in the 88th percentile among its peer group of 51,455 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

redhatpatch availablevia redhat_api
Product: Red Hat Linux 6.2
View patch

Vendor Advisories (1)

redhatCVE-2001-0670

security flaw

Aug 29, 2001

References

ftp.netbsd.org / pub/NetBSD/security/advisories/NetBSD-SA2001-018.txt.asc
stage.caldera.com / pub/security/openserver/CSSA-2001-SCO.20/CSSA-2001-SCO.20.txt
Patch
exchange.xforce.ibmcloud.com / vulnerabilities/7046
cert.org / advisories/CA-2001-30.html
US Government Resource
kb.cert.org / vuls/id/274043
US Government Resource
openbsd.com / errata28.html
Patch
redhat.com / support/errata/RHSA-2001-147.html
securityfocus.com / bid/3252
xforce.iss.net / alerts/advise94.php
PatchVendor Advisory