CVE-2007-5381

CVE-2007-5381 is a critical-severity vulnerability in Cisco Ios with a CVSS 2.0 base score of 9.3. Its EPSS exploit-prediction score of 15% places it in the 96th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-119.

Key facts

• Severity: Critical (CVSS 2.0 base score 9.3)
• EPSS exploit prediction: 15% (96th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-119
• Affected product: Cisco Ios
• Published: 2007-10-12
• Last modified: 2026-06-16

Description

Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to the LPD from a source port other than 515.

Frequently asked questions

What is CVE-2007-5381?

Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to the LPD from a source port other than 515.

How severe is CVE-2007-5381?

CVE-2007-5381 has a CVSS 2.0 base score of 9.3, rated critical severity.

Is CVE-2007-5381 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 15% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-5381?

CVE-2007-5381 primarily affects Cisco Ios. In total, 1429 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-5381?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2007-5381 published?

CVE-2007-5381 was published on 2007-10-12 and last updated on 2026-06-16.

References

• http://osvdb.org/37935
• http://secunia.com/advisories/27169
• http://www.cisco.com/en/US/products/products_security_response09186a00808d72e3.html
• http://www.irmplc.com/index.php/155-Advisory-024
• http://www.kb.cert.org/vuls/id/230505
• http://www.securityfocus.com/bid/26001
• http://www.securitytracker.com/id?1018798
• http://www.vupen.com/english/advisories/2007/3457
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37046

Affected products (1429)

• cpe:2.3:o:cisco:ios:10.3:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:10.3\(3.3\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:10.3\(3.4\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:10.3\(4.2\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:10.3\(4.3\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:10.3\(16\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:10.3\(19a\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0\(12\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0\(17\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0\(17\)bt:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0\(18\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0\(20.3\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0\(22a\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0\(22b\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0\(x\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.0.12\(a\)bt:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(5\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(7\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(7\)aa:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(7\)ca:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(9\)ia:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(11\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(12\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(13\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(13\)aa:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(13\)ca:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(13\)ia:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(14\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(15\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(15\)aa:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(15\)ca:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(15\)ia:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(16\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(16\)aa:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(16\)ia:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(17\):*:*:*:*:*:*:*
• cpe:2.3:o:cisco:ios:11.1\(17\)cc:*:*:*:*:*:*:*

More vulnerabilities in Cisco Ios

• CVE-2011-3271 — Critical (CVSS 10.0): Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to…
• CVE-2011-0935 — Critical (CVSS 10.0): The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which…
• CVE-2010-1574 — Critical (CVSS 10.0): IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of…
• CVE-2010-0581 — Critical (CVSS 10.0): Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute…
• CVE-2010-0580 — Critical (CVSS 10.0): Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute…
• CVE-2006-4950 — Critical (CVSS 10.0): Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices,…

All CVEs affecting Cisco Ios →

Other CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities

• CVE-2026-2778 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in…
• CVE-2026-2776 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability…
• CVE-2025-1866 — Critical (CVSS 10.0): Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows…
• CVE-2022-27625 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
• CVE-2022-27624 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
• CVE-2020-11896 — Critical (CVSS 10.0): The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

Browse all CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities →