Solaris 2.6/7.0 - lp -d Option Buffer Overflow

// source: https://www.securityfocus.com/bid/1143/info A buffer overrun has been discovered in the lp program, as included with Sun's Solaris 7 operating system. By passing well crafted, machine executable code of sufficient length to the -d option of lp, it becomes possible to execute arbitrary...

CVE-1999-1343

HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service hang via a long URL that contains a large number of . characters...

SCO Open Server 5.0.5 - cancel Buffer Overflow

SCO Open Server 5.0.5 - cancel Buffer Overflow // source: https://www.securityfocus.com/bid/702/info There is a buffer overflow vulnerability in /opt/K/SCO/Unix/5.0.5Eb/.softmgmt/var/usr/bin/cancel. It is important to know that the overflows are not in "/usr/bin/cancel" or "/usr/lpd/remote/cancel...

SCO Open Server 5.0.5 - cancel Buffer Overflow

// source: https://www.securityfocus.com/bid/702/info There is a buffer overflow vulnerability in /opt/K/SCO/Unix/5.0.5Eb/.softmgmt/var/usr/bin/cancel. It is important to know that the overflows are not in "/usr/bin/cancel" or "/usr/lpd/remote/cancel". The consequence of this vulnerability being...

HP HP-UX 10.34 rlpdaemon - Remote Overflow

HP HP-UX 10.34 rlpdaemon - Remote Overflow / source: https://www.securityfocus.com/bid/150/info A number of vulnerabilities exist in Hewlett Packard's rlpdaemon under HPUX 9.x and 10.x. These vulnerabilities may allow for a remote attacker to access the system under the lp user account, as well a...

HP HP-UX 10.34 rlpdaemon - Remote Overflow

/ source: https://www.securityfocus.com/bid/150/info A number of vulnerabilities exist in Hewlett Packard's rlpdaemon under HPUX 9.x and 10.x. These vulnerabilities may allow for a remote attacker to access the system under the lp user account, as well as execute arbitrary commands remotely, also...

Solaris 2.5.1 lp lpsched - Symlink

Solaris 2.5.1 lp lpsched - Symlink !/bin/sh lpNet & temp file exploit: break lp, then use lp priv to break root or bin, etc.... Written by: Chris Sheldon [email protected] Tested on Solaris-2.5.1: SunOS testhost 5.5.1 Generic sun4m sparc SUNW,SPARCstation-20 Caveat: This system is running...

Solaris 2.5.1 lp and lpsched Symlink Vulnerabilities

Exploit for solaris platform in category local exploits ==================================================== Solaris 2.5.1 lp and lpsched Symlink Vulnerabilities ==================================================== !/bin/sh lpNet & temp file exploit: break lp, then use lp priv to break root or bi...

Solaris 2.5.1 lp / lpsched - Symlink

!/bin/sh lpNet & temp file exploit: break lp, then use lp priv to break root or bin, etc.... Written by: Chris Sheldon [email protected] Tested on Solaris-2.5.1: SunOS testhost 5.5.1 Generic sun4m sparc SUNW,SPARCstation-20 Caveat: This system is running without patches. Sun released patch...

FOD and LP for Windows 10 1511 - build 14393 and branch RS1_Release

This detectoid will be used for FOD and LP for Windows 10 1511 - build 14393 and branch RS1Release...