[SECURITY] New versions of lpr released

The version of lpr that was distributed with Debian GNU/Linux 2.1 suffers from a couple of problems: there was a race in lpr that could be exploited by users to print files they can not normally read lpd did not check permissions of queue-files. As a result by using the -s flag it could be tricke...

CVE-1999-0299

CVE-1999-0299 corresponds to a buffer overflow in the FreeBSD lpd daemon triggered by long DNS hostnames. Connected sources (Nessus plugin) identify the affected product as FreeBSD 2.x lpd and note remediation by upgrading to FreeBSD 3.x. The description and Red Hat/NVD entries reiterate the same...

CVE-1999-0299: Undefined Security Weakness

Buffer overflow in FreeBSD lpd through long DNS hostnames...

SCO_lpr_vuln.txt

Subject: SCO 5.0.5 lpr local root exploit To: [email protected] Greetings, There is a hole in SCO 5.0.5, probably 5.0.x, /usr/bin/lpr. Or more accurately, /usr/lpd/remote/lp, which lpr execs and passes your command line args on to. This means that while /usr/bin/lpr is sgid lp, we'll stil...

FreeBSD-SA-97:02.lpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-97:02 Security Advisory FreeBSD, Inc. Topic: Buffer overflow in lpd Category: core Module: lpd Announced: 1997-03-26 Affects: FreeBSD 2.1.7 and earlier and FreeBSD 2.2...