Important: Red Hat Security Advisory: cups security update

Updated CUPS packages that fix several security issues are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow was found in the CUPS pdftops filter, which uses code from the Xpdf package. An attacker who has the ability ...

CVE-2001-0485

The CVE concerns SGI IRIX netprint: a local-privilege escalation in /usr/lib/print/netprint (IRIX 6.2 and potentially other versions) that allows a local user with lp privileges to run arbitrary commands via the -n option. The SGI advisory documents confirmed affected installations and provides r...

CVE-2001-0485: Undefined Security Weakness

Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option...

CVE-2002-1366: Undefined Security Weakness

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

Solaris 8 (x86) : 109895-02

SunOS 5.8x86: lp driver patch. Date this patch was last updated by Sun : Jan/06/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2002-1473: Undefined Security Weakness

Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 11i allow local users to cause a denial of service and possibly execute arbitrary code...

Unpassworded 'lp' Account

The account 'lp' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "lp"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11246; scriptversion"1.36";...

CVE-2002-1285

runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments...

Important: Red Hat Security Advisory: ghostscript security update

Updated packages are available for GNU Ghostscript, which fix a vulnerability found during PostScript interpretation. Ghostscript is a program for displaying PostScript files or printing them to non-PostScript printers. An untrusted PostScript file can cause ghostscript to execute arbitrary...

CVE-1999-1343

HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service hang via a long URL that contains a large number of . characters...

CVE-1999-1343: Undefined Security Weakness

HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service hang via a long URL that contains a large number of . characters...

IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 - '/usr/lib/print/netprint' Local Privilege Escalation

!/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/lib/print/netprint This code gets released due to another post to the Bugtraq mailing list. For IRIX 6.3 and above this privilage escalation attack can be conducted by local lp users only...

BSD lpr 0.54 -4 - Arbitrary Command Execution

BSD lpr 0.54 -4 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/1834/info lpr is a set of printing tools for unix systems. The lpr package that ships with RedHat Linux 6.2 and possibly earlier versions contains a vulnerability that will allow an attacker to execute arbitra...

Серьезная дырка в LPR (PostScript shell execution & grog)

При печати PostScript документов выполняются shell-команды содержащиеся в документах, при этом не сбрасывается egid lp, что позволяет получить gid lp, кроме того, в отдельных случаях возможно получить root используя некорректный вызов к программе pic в grog...

BSD 'lpr' 0.54 -4 - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/1834/info lpr is a set of printing tools for unix systems. The lpr package that ships with RedHat Linux 6.2 and possibly earlier versions contains a vulnerability that will allow an attacker to execute arbitrary commands with the privileges of group 'lp'...

CVE-2000-0316

Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option...

CVE-2000-0316: Undefined Security Weakness

Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option...

Solaris 2.67.0 - lp -d Option Buffer Overflow

Solaris 2.67.0 - lp -d Option Buffer Overflow // source: https://www.securityfocus.com/bid/1143/info A buffer overrun has been discovered in the lp program, as included with Sun's Solaris 7 operating system. By passing well crafted, machine executable code of sufficient length to the -d option of...

Solaris 2.6/7.0 - lp -d Option Buffer Overflow

// source: https://www.securityfocus.com/bid/1143/info A buffer overrun has been discovered in the lp program, as included with Sun's Solaris 7 operating system. By passing well crafted, machine executable code of sufficient length to the -d option of lp, it becomes possible to execute arbitrary...

CVE-1999-1343

HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service hang via a long URL that contains a large number of . characters...