HP-UX LPD 10.20/11.00/11.11 - Command Execution (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP-UX LPD...

CVE-2000-1208

Format string vulnerability in startprinting function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote call...

CVE-2000-1208: Undefined Security Weakness

Format string vulnerability in startprinting function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote call...

CVE-2001-1002: Undefined Security Weakness

The default configuration of the DVI print filter dvips in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands...

Immunity Canvas: CACHEFSD_LPD

Name| cachefsdlpd ---|--- CVE| CVE-2002-0084 Exploit Pack| CANVAS Description| cachefsd .cfsmnt File Stack Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 CVE Name: CVE-2002-0084 VENDOR: Sun Development Notes: This vulnerability had been marked only as ...

CVE-2000-0839

WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port 515...

CVE-2000-0839

Technical details about CVE-2000-0839 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, impact, and fixes.

CVE-2000-0615

CVE-2000-0615 : LPRng 3.6.x improperly installs lpd as setuid root, allowing local users to append lpd trace and logging messages to files. The connected documents confirm the vulnerability is a local privilege issue tied to the lpd binary running with root privileges. No explicit exploit details...

CVE-2000-0839: Undefined Security Weakness

WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port 515...

CVE-2000-0615: Undefined Security Weakness

LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files...

CVE-2001-0670: Undefined Security Weakness

Buffer overflow in BSD line printer daemon in.lpd or lpd in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue...

CVE-2001-1583

lpd daemon in.lpd in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220...

CVE-2001-0671: Undefined Security Weakness

Buffer overflows in 1 sendstatus, 2 killprint, and 3 chkfhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges...

Переполнения буфера во многих lpd (buffer overflow)

Переполнение буфера позволяет выполнять код с привилегиями lpd. Кроме того, можно овладеть любым файлом, к которому имеет доступ lpd...

Irix LPD tagprinter - Command Execution (Metasploit)

Irix LPD tagprinter - Command Execution Metasploit $Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

Irix LPD tagprinter - Command Execution (Metasploit)

$Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Solaris 8.0 LPD - Command Execution (Metasploit)

Solaris 8.0 LPD - Command Execution Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Solaris 2.x7.08 LPD - Remote Command Execution

Solaris 2.x7.08 LPD - Remote Command Execution source: https://www.securityfocus.com/bid/3274/info The print protocol daemon, 'in.lpd' or 'lpd', shipped with Solaris may allow for remote attackers to execute arbitrary commands on target hosts with superuser privileges. The alleged vulnerability i...

Solaris LPD Command Execution

This module exploits an arbitrary command execution flaw in the in.lpd service shipped with all versions of Sun Solaris up to and including 8.0. This module uses a technique discovered by Dino Dai Zovi to exploit the flaw without needing to know the resolved name of the attacking system. Module...

Solaris 2.x/7.0/8 LPD - Remote Command Execution

source: https://www.securityfocus.com/bid/3274/info The print protocol daemon, 'in.lpd' or 'lpd', shipped with Solaris may allow for remote attackers to execute arbitrary commands on target hosts with superuser privileges. The alleged vulnerability is not the buffer overflow discovered by ISS. It...