6 matches found
Exploit for Path Traversal in Apache Http_Server
CVE-2021-42013 Description This script exploits CVE-2021-...
SUSE-SU-2018:0639-1 Security update for evince
This update for evince provides the following fix: - CVE-2017-1000159: Prevent command line injections via filenames when printing to a file. bsc1070046...
CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files...
CVE-2000-0881
The CVE-2000-0881 issue affects the LPPlus dccscan setuid program. The root cause is insufficient permission checks to verify a user’s authorization to print the target file, enabling local users to print arbitrary files. This is a local-privilege/authorization bypass scenario with potential info...
CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files...
LPPlus 3.2.23.3 - dccscan Unprivileged read
LPPlus 3.2.23.3 - dccscan Unprivileged read source: https://www.securityfocus.com/bid/1644/info $LPHOME/bin/dccscan is suid-root and can be executed by any user. It is possible for an unprivileged user to print files to which he does not have read access. In testing, this works even for printers ...