CVE-2006-0227

Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to delete arbitrary files or disable the LP print service via unknown attack vectors...

HP-UX PHNE_33791 : s700_800 11.11 r-commands cumulative mega-patch

s700800 11.11 r-commands cumulative mega-patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability hs been identified with HP-UX systems running in Trusted Mode. The vulnerability could be exploited remotely to gain unauthorized access. HPSBUX02072...

HP-UX PHNE_33790 : s700_800 11.00 r-commands cumulative mega-patch

s700800 11.00 r-commands cumulative mega-patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability hs been identified with HP-UX systems running in Trusted Mode. The vulnerability could be exploited remotely to gain unauthorized access. HPSBUX02072...

HP Security Digests - HP-UX security bulletins digest

HP Support Information Digests =============================================================================== o Security Bulletin Digest Split ------------------------------ The security bulletins digest has been split into multiple digests based on the operating system HP-UX, MPE/iX, and HP...

Important: Red Hat Security Advisory: cups security update

Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating systems...

SCO OpenServer Unix utilities format string bugs

Format string vulnerabilities in different utilities including sgid lp /usr/lib/nucrt/bin/nwprint...

HP-UX Security patch : PHCO_27133

The remote host is missing HP-UX Security Patch number PHCO27133 . Sec. Vulnerability in LP subsystem %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16856; scriptversion"1.7";...

Important: Red Hat Security Advisory: cups security update

Updated CUPS packages that fix several security issues are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow was found in the CUPS pdftops filter, which uses code from the Xpdf package. An attacker who has the ability ...

CVE-2001-0485

The CVE concerns SGI IRIX netprint: a local-privilege escalation in /usr/lib/print/netprint (IRIX 6.2 and potentially other versions) that allows a local user with lp privileges to run arbitrary commands via the -n option. The SGI advisory documents confirmed affected installations and provides r...

Solaris 8 (x86) : 109895-02

SunOS 5.8x86: lp driver patch. Date this patch was last updated by Sun : Jan/06/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Unpassworded 'lp' Account

The account 'lp' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "lp"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11246; scriptversion"1.36";...

CVE-2002-1285

runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments...

Important: Red Hat Security Advisory: ghostscript security update

Updated packages are available for GNU Ghostscript, which fix a vulnerability found during PostScript interpretation. Ghostscript is a program for displaying PostScript files or printing them to non-PostScript printers. An untrusted PostScript file can cause ghostscript to execute arbitrary...

CVE-1999-1343

HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service hang via a long URL that contains a large number of . characters...

IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 - '/usr/lib/print/netprint' Local Privilege Escalation

!/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/lib/print/netprint This code gets released due to another post to the Bugtraq mailing list. For IRIX 6.3 and above this privilage escalation attack can be conducted by local lp users only...

BSD lpr 0.54 -4 - Arbitrary Command Execution

BSD lpr 0.54 -4 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/1834/info lpr is a set of printing tools for unix systems. The lpr package that ships with RedHat Linux 6.2 and possibly earlier versions contains a vulnerability that will allow an attacker to execute arbitra...

BSD 'lpr' 0.54 -4 - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/1834/info lpr is a set of printing tools for unix systems. The lpr package that ships with RedHat Linux 6.2 and possibly earlier versions contains a vulnerability that will allow an attacker to execute arbitrary commands with the privileges of group 'lp'...

Серьезная дырка в LPR (PostScript shell execution & grog)

При печати PostScript документов выполняются shell-команды содержащиеся в документах, при этом не сбрасывается egid lp, что позволяет получить gid lp, кроме того, в отдельных случаях возможно получить root используя некорректный вызов к программе pic в grog...

CVE-2000-0316

Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option...

Solaris 2.67.0 - lp -d Option Buffer Overflow

Solaris 2.67.0 - lp -d Option Buffer Overflow // source: https://www.securityfocus.com/bid/1143/info A buffer overrun has been discovered in the lp program, as included with Sun's Solaris 7 operating system. By passing well crafted, machine executable code of sufficient length to the -d option of...