Quick answers
- Is CVE-1999-0061 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-1999-0061 being exploited in the wild.
- How severe is CVE-1999-0061?
- Medium severity, with a CVSS score of 5.1, published 2 October 1997.
- Which products and versions are affected?
- BSD Line Printer Daemon (lpd).
- Is there a fix for CVE-1999-0061?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-1999-0061 attacked?
- It is attacked over the network, in an operating system.
- Am I affected by CVE-1999-0061?
- Check whether you run Bsd Line Printer Daemon, Bsdi Bsd Os, Freebsd or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The BSD line printer daemon (lpd) is susceptible to multiple flaws involving improper handling of print job requests. An unauthenticated remote attacker can exploit these weaknesses to create or delete arbitrary files on the host system or execute commands with the privileges of the lpd process. The vulnerability typically stems from insufficient validation of control files or command-line arguments passed to the daemon. While the attack vector is network-based, successful exploitation may require specific environmental conditions or configurations, as reflected in the high access complexity. Patches were historically released by various BSD-derived operating system vendors to address these issues in the late 1990s.
Affected products
- BSD Line Printer Daemon (lpd)
Timeline
- 1997-10-02: disclosed