CVE:CVE-2000-1221
CNNVD:CNNVD-200001-026
多个Linux操作系统lpr包中的line printer daemon (lpd)通过对比本地机器的反向解析主机名和由gethostname返回的打印服务器的主机名进行认证。远程攻击者通过修改攻击IP的DNS绕过预定的访问控制。
solution:Upgrade sgi irix to a higher version than 6.5,6.5.1,6.5.2,6.5.3,6.5.4,6.5.5,6.5.6,6.5.7,6.5.8,6.5.9,6.5.10,6.5.11,6.5.12,6.5.13,6.5.14f,6.5.14m,6.5.15f,6.5.15m,6.5.16f,6.5.16m,6.5.17f,6.5.17m,6.5.18f,6.5.18m,and avoid the version 6.5,6.5.1,6.5.2,6.5.3,6.5.4,6.5.5,6.5.6,6.5.7,6.5.8,6.5.9,6.5.10,6.5.11,6.5.12,6.5.13,6.5.14f,6.5.14m,6.5.15f,6.5.15m,6.5.16f,6.5.16m,6.5.17f,6.5.17m,6.5.18f,6.5.18m; Upgrade debian debian_linux to a higher version than 2.1,and avoid the version 2.1; Upgrade redhat linux to a higher version than 4.1,4.2,5.0,5.2,6.0,6.1,and avoid the version 4.1,4.2,5.0,5.2,6.0,6.1