Vulnerability record · CVE-2000-1220 · published 8 January 2000

CVE-2000-1220: Sgi irix vulnerability

Sgi · Irix

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

10.0 CVSS 2.0 High EPSS 14% · top 3.5%

10.0CVSS 2.0 base score

14%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

18References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Linux Redhat

Irix Sgi

References

Link	Tags
ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P
http://seclists.org/lists/bugtraq/2000/Jan/0116.html
http://www.atstake.com/research/advisories/2000/lpd_advisory.txt
http://www.debian.org/security/2000/20000109
http://www.kb.cert.org/vuls/id/39001	US Government Resource
http://www.l0pht.com/advisories/lpd_advisory
http://www.redhat.com/support/errata/RHSA-2000-002.html
http://www.securityfocus.com/bid/927
https://exchange.xforce.ibmcloud.com/vulnerabilities/3841
ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P
http://seclists.org/lists/bugtraq/2000/Jan/0116.html
http://www.atstake.com/research/advisories/2000/lpd_advisory.txt
http://www.debian.org/security/2000/20000109
http://www.kb.cert.org/vuls/id/39001	US Government Resource
http://www.l0pht.com/advisories/lpd_advisory
http://www.redhat.com/support/errata/RHSA-2000-002.html
http://www.securityfocus.com/bid/927
https://exchange.xforce.ibmcloud.com/vulnerabilities/3841

Track CVE-2000-1220 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2010-1039Hp nfs\/oncplus vulnerabilityFormat string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.…EPSS 20%20 May 2010 10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%31 Dec 2005 10.0CVE-2004-0902Mozilla vulnerabilityMultiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote att…EPSS 10%27 Jan 2005 10.0CVE-2004-0903Mozilla vulnerabilityStack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Th…EPSS 9.7%27 Jan 2005 10.0CVE-2004-1025Enlightenment imlib vulnerabilityMultiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cau…EPSS 5.2%10 Jan 2005 10.0CVE-2004-1026Enlightenment imlib vulnerabilityMultiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote atta…EPSS 4.9%10 Jan 2005 10.0CVE-2004-0139Sgi irix vulnerabilityUnknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "t_unbind changes t_…EPSS 1.7%10 Jan 2005 10.0CVE-2004-0904Mozilla firefox vulnerabilityInteger overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow r…EPSS 8.0%31 Dec 2004

Source: NIST National Vulnerability Database (record CVE-2000-1220), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.