CVE-2007-5381

high · 9.3

Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to the LPD from a source port other than 515.

9.3

CVSS

14.7%

EPSS (exploit prob.)

97th

EPSS percentile

2007-10-12

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
cisco	ios	10.3
cisco	ios	10.3(3.3)
cisco	ios	10.3(3.4)
cisco	ios	10.3(4.2)
cisco	ios	10.3(4.3)
cisco	ios	10.3(16)
cisco	ios	10.3(19a)
cisco	ios	11
cisco	ios	11.0
cisco	ios	11.0(12)
cisco	ios	11.0(17)
cisco	ios	11.0(17)bt
cisco	ios	11.0(18)
cisco	ios	11.0(20.3)
cisco	ios	11.0(22a)
cisco	ios	11.0(22b)
cisco	ios	11.0(x)
cisco	ios	11.0.12(a)bt
cisco	ios	11.1
cisco	ios	11.1(5)
cisco	ios	11.1(7)
cisco	ios	11.1(7)aa
cisco	ios	11.1(7)ca
cisco	ios	11.1(9)ia
cisco	ios	11.1(11)
cisco	ios	11.1(12)
cisco	ios	11.1(13)
cisco	ios	11.1(13)aa
cisco	ios	11.1(13)ca
cisco	ios	11.1(13)ia
cisco	ios	11.1(14)
cisco	ios	11.1(15)
cisco	ios	11.1(15)aa
cisco	ios	11.1(15)ca
cisco	ios	11.1(15)ia
cisco	ios	11.1(16)
cisco	ios	11.1(16)aa
cisco	ios	11.1(16)ia
cisco	ios	11.1(17)
cisco	ios	11.1(17)cc

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-5381