CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

NIPrint LPD-LPR Print Server String Handling Remote Overflow

A vulnerability in the NIPrint could allow an attacker to remotely overflow an internal buffer which could allow code execution. include"compat.inc"; ifdescription scriptid11926; scriptversion"1.17"; scriptcveid"CVE-2003-1141"; scriptbugtraqid8968; scriptnameenglish:"NIPrint LPD-LPR Print Server...

SRT2003-11-02-0115 - NIPrint LPD-LPR Remote overflow

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

NIPrint LPD-LPR Print Server <= 4.10 Remote Exploit

Exploit for unknown platform in category remote exploits =================================================== NIPrint LPD-LPR Print Server include else include include include include include include include include endif include // JMP ESP ADDRESS in Win XP 5.1.2600 define RET 0x77F5801c define...

CVE-2003-0697

CVE-2003-0697 describes a format string vulnerability in the lpd component within the bos.rte.printers fileset on AIX 4.3–5.2, reportedly triggered when debug is enabled. The flaw allows local users to cause a denial of service (crash) and could potentially escalate to root privileges. Affected s...

Multiple Vulnerabilities in BSD LPR Subsystem on IRIX update

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Multiple Vulnerabilities in BSD LPR Subsystem Number : 20030406-02-P Date : April 25, 2003 Reference: CERT VU39001 Reference: CERT VU30308 Reference: CERT VU293305 Reference: CVE CAN-2003-0144 Reference: SGI Security Advisory...

Solaris in.lpd Crafted Job Request Arbitrary Remote Command Execution

The remote lpd daemon is vulnerable to an environment error that could allow an attacker to execute arbitrary commands on this host. Nessus uses this vulnerability to retrieve the password file of the remote host although any command could be executed. %NASLMINLEVEL 70300 C Tenable Network...

BSD in.lpd File Name Handling Remote Overflow

The remote bsd-lpd daemon might be vulnerable to a buffer overflow when sent a too long file name and then asked to show the print queue when the file is being printed. An attacker may use this flaw to gain a shell on this host. Because of the conditions to positively check for this flaw are very...

FreeBSD 2.x lpd Long DNS Hostname Overflow

The remote lpd daemon seems to be vulnerable to a buffer overflow when a host with a too long DNS host name connects to it. Nessus solely relied on the version of the remote operating system to issue an alert, so this might be a false positive. C Tenable Network Security, Inc. This is a check for...

AIX lpd Multiple Functions Remote Overflow

The remote lpd daemon seems to be vulnerable to various buffer overflows in the functions sendstatus, killprint and chkfhost. Nessus solely relied on the version number of the remote operating system to issue this warning, so this might be a false positive C Tenable Network Security, Inc. This is...

pic buffer overflow

buffer overflow in pic, remote if lpd is running...

HP-UX LPD 10.2011.0011.11 - Command Execution (Metasploit)

HP-UX LPD 10.2011.0011.11 - Command Execution Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

HP-UX LPD 10.20 11 11.11 Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

HP-UX LPD 10.20/11.00/11.11 - Command Execution (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP-UX LPD...

CVE-2000-1208

Format string vulnerability in startprinting function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote call...

Immunity Canvas: CACHEFSD_LPD

Name| cachefsdlpd ---|--- CVE| CVE-2002-0084 Exploit Pack| CANVAS Description| cachefsd .cfsmnt File Stack Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 CVE Name: CVE-2002-0084 VENDOR: Sun Development Notes: This vulnerability had been marked only as ...

CVE-2000-0839

WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port 515...

CVE-2000-0839

Technical details about CVE-2000-0839 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, impact, and fixes.

CVE-2000-0615

CVE-2000-0615 : LPRng 3.6.x improperly installs lpd as setuid root, allowing local users to append lpd trace and logging messages to files. The connected documents confirm the vulnerability is a local privilege issue tied to the lpd binary running with root privileges. No explicit exploit details...