3423 matches found
Microsoft IIS 5 .printer ISAPI Filter Enabled
IIS 5 has support for the Internet Printing ProtocolIPP, which is enabled in a default install. The protocol is implemented in IIS5 as an ISAPI extension. At least one security problem a buffer overflow has been found with that extension in the past, so we recommend you disable it if you do not u...
Microsoft Windows 2000/Internet Information Server (IIS) 5.0 Internet Printing Protocol (IPP) ISAPI contains buffer overflow (MS01-023)
Overview A vulnerability exists in Microsoft IIS 5.0 running on Windows 2000 that allows a remote intruder to run arbitrary code on the victim machine. Description Windows 2000 includes support for the Internet Printing Protocol IPP via an ISAPI extension. According to Microsoft, this extension i...
Microsoft IIS 5.0 - .printer ISAPI Extension Buffer Overflow (1)
Microsoft IIS 5.0 - .printer ISAPI Extension Buffer Overflow 1 source: https://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer reques...
Microsoft IIS 5.0 - '.printer' ISAPI Extension Buffer Overflow (2)
/ source: https://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer request containing approx 420 bytes in the 'Host:' field will allow...
MS01-023 Microsoft IIS 5.0 Printer Host Header Overflow
This exploits a buffer overflow in the request processor of the Internet Printing Protocol ISAPI module in IIS. This module works against Windows 2000 Server and Professional SP0-SP1. If the service stops responding after a successful compromise, run the exploit a couple more times to completely...
Microsoft IIS 5.0 - .printer ISAPI Extension Buffer Overflow (2)
Microsoft IIS 5.0 - .printer ISAPI Extension Buffer Overflow 2 / source: https://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer...
Microsoft IIS 5.0 - '.printer' ISAPI Extension Buffer Overflow (1)
source: https://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer request containing approx 420 bytes in the 'Host:' field will allow t...
Microsoft IIS 5.0 - .printer ISAPI Extension Buffer Overflow (4)
Microsoft IIS 5.0 - .printer ISAPI Extension Buffer Overflow 4 source: https://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer reques...
LPRng can pass user-supplied input as a format string parameter to syslog() calls
Overview A popular replacement software package to the BSD lpd printing service called LPRng contains at least one software defect known as a "format string vulnerability" which may allow remote users to execute arbitrary code on vulnerable systems. The privileges of such code will probably be...
CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files...
CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files...
CVE-2000-0881
The CVE-2000-0881 issue affects the LPPlus dccscan setuid program. The root cause is insufficient permission checks to verify a user’s authorization to print the target file, enabling local users to print arbitrary files. This is a local-privilege/authorization bypass scenario with potential info...
CVE-2000-0512
CUPS Common Unix Printing System 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service...
CVE-2000-0513
CVE-2000-0513 affects CUPS 1.04 and earlier. The vulnerability allows remote DoS when an attacker authenticates with a username that either does not exist or lacks a shadow password. Impact is denial of service (PARTIAL availability). The reports reference a DoS patch (cups-DoS.patch) and public ...
Multiple Security Holes in LPPlus
LPPlus is Plus Technologies' print management system for unix. It contains several serious security holes, some of which undermine the integrity of the printing subsystem, some of which threaten the security of the system on which the product is installed. Details ------- Hole 1: Of the 74 binari...
LPPlus 3.2.23.3 - dccscan Unprivileged read
LPPlus 3.2.23.3 - dccscan Unprivileged read source: https://www.securityfocus.com/bid/1644/info $LPHOME/bin/dccscan is suid-root and can be executed by any user. It is possible for an unprivileged user to print files to which he does not have read access. In testing, this works even for printers ...
AIX 4.2/4.3 - '/usr/lib/lpd/pio/etc/piomkapqd' Local Buffer Overflow
// source: https://www.securityfocus.com/bid/3238/info // // The 'piomkapqd' utility is a component of the AIX printing subsystem. By default, it is installed setgid and owned by the 'printk' group. // // 'piomkapqd' contains a locally exploitable stack overrun condition in it's handling of comma...
AIX 4.24.3 - usrliblpdpioetcpiomkapqd Local Buffer Overflow
AIX 4.24.3 - usrliblpdpioetcpiomkapqd Local Buffer Overflow // source: https://www.securityfocus.com/bid/3238/info // // The 'piomkapqd' utility is a component of the AIX printing subsystem. By default, it is installed setgid and owned by the 'printk' group. // // 'piomkapqd' contains a locally...
CVE-2000-0232
CVE-2000-0232 affects Microsoft TCP/IP Printing Services (Print Services for Unix). The vulnerability is that a malformed TCP/IP print request can be used to cause a denial of service. It is a local-attack, low-severity issue (CVSS v2 base score 2.1, availability impact PARTIAL). The documentatio...