113 matches found
LPRNG html2ps 1.0 - Remote Command Execution
source: https://www.securityfocus.com/bid/6079/info A vulnerability has been discovered in the html2ps filter which is included in the lprng print system. It has been reported that it is possible for a remote attacker to execute arbitrary commands. The attacker must reportedly already have access...
LPRNG html2ps 1.0 - Remote Command Execution
LPRNG html2ps 1.0 - Remote Command Execution source: https://www.securityfocus.com/bid/6079/info A vulnerability has been discovered in the html2ps filter which is included in the lprng print system. It has been reported that it is possible for a remote attacker to execute arbitrary commands. The...
Important: Red Hat Security Advisory: LPRng security update
The LPRng print spooler, as shipped in Red Hat Linux Advanced Server 2.1, accepts all remote print jobs by default. Updated LPRng packages are available to fix this issue. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation...
CVE-2002-0378
The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts...
CVE-2002-0003
Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system...
CVE-2002-0003
CVE-2002-0003 describes a buffer overflow in the groff preprocessor (groff 1.16 and earlier) that can allow remote attackers to gain privileges via the LPRng printing system when groff is invoked through lpd. The vulnerability affects the preprocessor and can enable privilege escalation to the lp...
CVE-2002-0003: Undefined Security Weakness
Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system...
CVE-2002-0378
The CVE-2002-0378 issue concerns the LPRng print spooler defaulting to accept print jobs from arbitrary remote hosts in Red Hat Linux 7.0–7.3, Mandrake 8.1–8.2, and similar OSes. Connected advisories (e.g., RHSA-2002:120, RHSA-2002:089, MDKSA-2002:042) document that the default policy allowed rem...
CVE-2002-0378
The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts...
CVE-2002-0378: Undefined Security Weakness
The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts...
Important: Red Hat Security Advisory: : Relaxed LPRng job submission policy
The LPRng print spooler, as shipped in Red Hat Linux 7.x, accepts all remote print jobs by default. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation environment. We are grateful to Matthew Caron for pointing out this...
CVE-2000-0615
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files...
CVE-2000-0615
CVE-2000-0615 : LPRng 3.6.x improperly installs lpd as setuid root, allowing local users to append lpd trace and logging messages to files. The connected documents confirm the vulnerability is a local privilege issue tied to the lpd binary running with root privileges. No explicit exploit details...
CVE-2001-0787
LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges...
CVE-2001-0787
CVE-2001-0787 affects LPRng in Red Hat Linux 7.0 and 7.1, where dropping privileges does not remove supplemental group memberships. The underlying issue is that LPRng fails to drop these group memberships when lowering privileges, so the process and its children may retain the starting process’s ...
CVE-2001-0787: Undefined Security Weakness
LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges...
CVE-2000-0615: Undefined Security Weakness
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files...
CVE-2002-0003
Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system...
