288 matches found
CVE-2005-3277
The LPD service in HP-UX 10.20 11.11 11i and earlier allows remote attackers to execute arbitrary code via shell metacharacters "" or single backquote in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than...
CVE-2005-3277
CVE-2005-3277 documents a remote command-execution vulnerability in HP-UX LPD where shell metacharacters in a crafted request trigger code execution, affecting HP-UX 10.20 and 11.11 (11i) and earlier. The issue is tied to error-path handling and is explicitly noted as distinct from CVE-2002-1473....
CVE-2005-3277
The LPD service in HP-UX 10.20 11.11 11i and earlier allows remote attackers to execute arbitrary code via shell metacharacters "" or single backquote in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than...
HP-UX <= 11.11 lpd Remote Command Execution Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
HP-UX <= 11.11 lpd Remote Command Execution Exploit (meta)
Exploit for hp-ux platform in category remote exploits ========================================================== HP-UX 'HP-UX LPD Command Execution', 'Version' = '$Revision: 1.13 $', 'Authors' = 'H D Moore ', 'Arch' = , 'OS' = 'hpux' , 'Priv' = 0, 'UserOpts' = 'RHOST' = 1, 'ADDR', 'The target...
HP-UX 11.11 - lpd Remote Command Execution (Metasploit)
HP-UX 11.11 - lpd Remote Command Execution Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dua...
HP-UX 11.11 - lpd Remote Command Execution (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
solaris_lpd_unlink.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Solaris 10 LPD - Arbitrary File Delete (Metasploit)
Solaris 10 LPD - Arbitrary File Delete Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual...
Solaris <= 10 LPD Arbitrary File Delete Exploit (metasploit)
Exploit for solaris platform in category remote exploits ============================================================ Solaris 'Solaris LPD Arbitrary File Delete', 'Version' = '$Revision: 1.6 $', 'Authors' = 'H D Moore ', 'Optyx ' , 'Arch' = , 'OS' = 'solaris' , 'UserOpts' = 'RHOST' = 1, 'ADDR',...
Solaris 10 LPD - Arbitrary File Delete (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
CVE-2005-1815
Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via 1 an FTP command with a long argument to FTPD ftpdw.exe or 2 a large amount of data to LPD Lpdw.exe...
CVE-2005-1815
Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via 1 an FTP command with a long argument to FTPD ftpdw.exe or 2 a large amount of data to LPD Lpdw.exe...
Hummingbird InetD FTP Server, LPD server multiple vulnerabilities
Buffer overflows, DoS...
Hummingbird InetD LPD Component (Lpdw.exe) Data Overflow
The lpd daemon installed on the remote host appears to be from the Hummingbird Connectivity suite and suffers from a buffer overflow vulnerability. An attacker can crash the daemon by sending commands with overly-long queue names. Additionally, with a specially crafted packet, the attacker can al...
CVE-2003-1142
Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users to gain privileges...
CVE-2003-1142
The CVE-2003-1142 entry affects NIPrint LPD-LPR Print Server versions 4.10 and earlier. The underlying issue allows a local user to have Windows Explorer executed with SYSTEM privileges, enabling local privilege escalation. The provided sources describe the vulnerability impact but do not specify...
CVE-2000-1221
The line printer daemon lpd in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by...
CVE-2000-1221
The CVE describes a vulnerability in the line printer daemon (lpd) in the lpr package across multiple Linux operating systems. The root cause is an authentication check that compares the reverse-resolved hostname of the local machine to the hostname returned by gethostname; remote attackers can b...
CVE-2000-1220
CVE-2000-1220 affects the line printer daemon (lpd) in the lpr package across multiple Linux distributions. The vulnerability lets local users gain root privileges by causing sendmail to be invoked with arbitrary command line arguments through a crafted -C configuration file option. This is trigg...