CVE-2007-5381

Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to the LPD from a source port other than 515.

• CWE-119

• http://osvdb.org/37935
• http://secunia.com/advisories/27169Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_response09186a00808d72e3.html
• http://www.irmplc.com/index.php/155-Advisory-024
• http://www.kb.cert.org/vuls/id/230505US Government Resource
• http://www.securityfocus.com/bid/26001Exploit
• http://www.securitytracker.com/id?1018798
• http://www.vupen.com/english/advisories/2007/3457
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37046
• http://osvdb.org/37935
• http://secunia.com/advisories/27169Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_response09186a00808d72e3.html
• http://www.irmplc.com/index.php/155-Advisory-024
• http://www.kb.cert.org/vuls/id/230505US Government Resource
• http://www.securityfocus.com/bid/26001Exploit
• http://www.securitytracker.com/id?1018798
• http://www.vupen.com/english/advisories/2007/3457
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37046

Published

Oct 12, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5374cp_memberedit.php in LightBlog 8.4.1.1 does not check for ad…
• CVE-2007-5375Interpretation conflict in the Sun Java Virtual Machine (JVM…
• CVE-2007-5377The (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-f…
• CVE-2007-5378Buffer overflow in the FileReadGIF function in tkImgGIF.c fo…
• CVE-2007-5379Rails before 1.2.4, as used for Ruby on Rails, allows remote…
• CVE-2007-5380Session fixation vulnerability in Rails before 1.2.4, as use…
• CVE-2007-5382The conversion utility for converting CiscoWorks Wireless LA…
• CVE-2007-5383The Thomson/Alcatel SpeedTouch 7G router, as used for the BT…
• CVE-2007-5384Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2007-5385Multiple cross-site scripting (XSS) vulnerabilities in the T…
• CVE-2007-5386Cross-site scripting (XSS) vulnerability in scripts/setup.ph…
• CVE-2007-5387PHP remote file inclusion vulnerability in active/components…