113 matches found
CVE-2003-0136
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...
DEBIAN-CVE-2003-0136
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...
CVE-2003-0136
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...
CVE-2003-0136
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...
CVE-2003-0136
The CVE-2003-0136 issue affects psbanner in the LPRng package, where a symbolic-link based temporary-file handling flaw in /tmp/before allows local users to overwrite arbitrary files. Public advisories confirm this vulnerability and provide patched updates for multiple distributions: Red Hat (RHS...
[SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 285-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0136: Undefined Security Weakness
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...
[SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 285-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 285-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...
DSA-285 lprng - insecure temporary file
Bulletin has no description...
CVE-2002-1285
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments...
CVE-2002-1285
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments...
CVE-2002-1285
CVE-2002-1285 describes a local privilege escalation in the LPRng package, where the dedicated runlpr utility allows the local lp user to gain root privileges through certain command line arguments. The description is limited to this mechanism; no further exploit details or affected versions are ...
CVE-2002-1285: Undefined Security Weakness
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments...
CVE-2002-1275
Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."...
CVE-2002-1275
Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."...
CVE-2002-1275
Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."...
CVE-2002-1275
CVE-2002-1275 concerns the html2ps HTML to PostScript converter (version 1.0) when used as a filter within LPRng. Reported as an unknown vulnerability, it allows a remote attacker to execute arbitrary code through unsanitized input. Public references in the provided documents confirm a Debian sec...
CVE-2002-1275
Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."...
CVE-2002-1275: Undefined Security Weakness
Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."...