SLES9: Security update for lprng

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: lprng More details may also be found by searching for keyword 5019988 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for lprng

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: lprng More details may also be found by searching for keyword 5019988 within the SuSE Enterprise Server 9 patch database linked in the references...

SuSE9 Security Update : SLES9-SP4: Security update for lprng (YOU Patch Number 11603)

There is a small memory leak in lpd which lets its memory usage grow a bit for each print job until the print system becomes unusable. - Using lprng with a printcap provided via NIS/YP produced following error: 'Inittempfile: bad tempdir '/var/spool/lpd/%P''. This was caused by the function...

Debian Security Advisory DSA 285-1 (lprng)

The remote host is missing an update to lprng announced via advisory DSA 285-1. OpenVAS Vulnerability Test $Id: deb2851.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 285-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-285)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IPS-1 Protection Update - Authentication (v 15), DDOS (v 12), DHCP (v 8), Enterprise Software (v 2), Finger (v 10), FTP (v 23), IRC (v 13), LPD (v 11)

This advisory covers a set of protocol updates for the Authentication, DDOS, DHCP, Enterprise Software, Finger, FTP, IRC, and LPD protocol groups. The Authentication protocol group has been updated to ignore password strength tests for anonymous and guest users. Increased protocol compliance...

LPRng 3.6.24-1 Remote Root Exploit

No description provided by source. / REMOTE ROOT EXPLOIT for linux x86 - LPRng-3.6.24-1 RedHat 7.0 The RedHat 7.0 replaced the BSD lpr with the LPRng package which is vulnerable to format string attacks because it passes information to the syslog incorrectly. You can get remote root access on...

LPRng (RedHat 7.0) lpd Remote Root Format String Exploit

No description provided by source. / Copyright c 2000 - Security.is The following material may be freely redistributed, provided that the code or the disclaimer have not been partly removed, altered or modified in any way. The material is the property of security.is. You are allowed to adopt the...

LPRng symbolic links problem

Symbolic links problem in lprngcerts.sh...

[SA13640] LPRng "lprng_certs.sh" Script Insecure Temporary File Creation

TITLE: LPRng "lprngcerts.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13640 VERIFY ADVISORY: http://secunia.com/advisories/13640/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: LPRng 3.x http://secunia.com/product/4454/ DESCRIPTION: Javier...

Debian DSA-285-1 : lprng - insecure temporary file

Karol Lewandowski discovered that psbanner, a printer filter that creates a PostScript format banner and is part of LPRng, insecurely creates a temporary file for debugging purpose when it is configured as filter. The program does not check whether this file already exists or is linked to another...

Mandrake Linux Security Advisory : LPRng (MDKSA-2003:060)

Karol Lewandowski discovered a problem with psbanner, a printer filter that creates a PostScript format banner. psbanner creates a temporary file for debugging purposes when it is configured as a filter, and does not check whether or not this file already exists or is a symlink. The filter will...

Mandrake Linux Security Advisory : groff (MDKSA-2002:012)

zen-parse discovered an exploitable buffer overflow in groff's preprocessor. If groff is invoked using the LPRng printing system, an attacker can gain rights as the 'lp' user. Likewise, this may be remotely exploitable if lpd is running and remotely accessible and the attacker knows the name of t...

Mandrake Linux Security Advisory : LPRng (MDKSA-2002:042)

Matthew Caron pointed out that using the LPRng default configuration, the lpd daemon will accept job submissions from any remote host. These updated LPRng packages modify the job submission policy in /etc/lpd.perms to refuse print jobs from remote hosts by default. %NASLMINLEVEL 70300 C Tenable...

SUSE-SA:2002:040: lprng, html2ps

The remote host is missing the patch for the advisory SUSE-SA:2002:040 lprng, html2ps. The lprng package contains the 'runlpr' program which allows the lp user to execute the lpr program as root. Local attackers can pass certain commandline arguments to lpr running as root, fooling it to execute...

RHEL 2.1 : LPRng (RHSA-2002:120)

The LPRng print spooler, as shipped in Red Hat Linux Advanced Server 2.1, accepts all remote print jobs by default. Updated LPRng packages are available to fix this issue. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation...

RHEL 2.1 : LPRng (RHSA-2003:150)

Updated LPRng packages resolving a temporary file vulnerability are now available. LPRng is a print spooler. LPRng includes a program, psbanner, that can be used to produce Postscript banner pages to separate print jobs. A vulnerability has been found in psbanner, which creates in an insecure...

Lprng symbolic links problem

psbanner creates temporary file without checking symbolic links...

Important: Red Hat Security Advisory: : : : Updated LPRng packages fix psbanner vulnerability

Updated LPRng packages for Red Hat Linux on IBM iSeries and pSeries systems resolve a temporary file vulnerability and an insecure default. LPRng is a print spooler. LPRng includes a program, psbanner, that can be used to produce Postscript banner pages to separate print jobs. A vulnerability has...

Low: Red Hat Security Advisory: LPRng security update

Updated LPRng packages resolving a temporary file vulnerability are now available. LPRng is a print spooler. LPRng includes a program, psbanner, that can be used to produce Postscript banner pages to separate print jobs. A vulnerability has been found in psbanner, which creates in an insecure...