CVE-2001-1583

lpd daemon in.lpd in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220...

Переполнения буфера во многих lpd (buffer overflow)

Переполнение буфера позволяет выполнять код с привилегиями lpd. Кроме того, можно овладеть любым файлом, к которому имеет доступ lpd...

Irix LPD tagprinter - Command Execution (Metasploit)

Irix LPD tagprinter - Command Execution Metasploit $Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

Irix LPD tagprinter - Command Execution (Metasploit)

$Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Solaris 2.x7.08 LPD - Remote Command Execution

Solaris 2.x7.08 LPD - Remote Command Execution source: https://www.securityfocus.com/bid/3274/info The print protocol daemon, 'in.lpd' or 'lpd', shipped with Solaris may allow for remote attackers to execute arbitrary commands on target hosts with superuser privileges. The alleged vulnerability i...

Solaris 8.0 LPD - Command Execution (Metasploit)

Solaris 8.0 LPD - Command Execution Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Solaris 2.x/7.0/8 LPD - Remote Command Execution

source: https://www.securityfocus.com/bid/3274/info The print protocol daemon, 'in.lpd' or 'lpd', shipped with Solaris may allow for remote attackers to execute arbitrary commands on target hosts with superuser privileges. The alleged vulnerability is not the buffer overflow discovered by ISS. It...

Solaris 8.0 LPD - Command Execution (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Solaris LPD...

FreeBSD-SA-01:58.lpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:58 Security Advisory FreeBSD, Inc. Topic: lpd contains remote root vulnerability Category: core Module: lpd Announced: 2001-08-30 Credits: ISS X-Force Affects: All...

LPRng/rhs-printfilters - remote execution of commands

posted to vendor security ppl, no reply, no patch, so posting here. --begin forwarded message-- RedHat 7.0 possibly others If the lpd is listening on 0.0.0.0 and no access controls are in place, it is possible to execute commands as the lp user, assuming tetex-dvips is installed. From man dvips...

RedHat 6.27.07.1 Lpd - Remote Command Execution via DVI Printfilter Configuration Error

RedHat 6.27.07.1 Lpd - Remote Command Execution via DVI Printfilter Configuration Error source: https://www.securityfocus.com/bid/3241/info 'dvips' is a utility that converts DVI documents to PostScript. It is an optional component of the TeTeX text formatting package. When installed on a system...

GNU groff 1.1x - xploitation Via LPD

GNU groff 1.1x - xploitation Via LPD // source: https://www.securityfocus.com/bid/3103/info lpd is the print spooling daemon. It is used to support network printing on a variety of unix platforms. The version of lpd that ships with linux systems invokes groff to process documents that are to be...

GNU groff 1.1x - xploitation Via LPD

// source: https://www.securityfocus.com/bid/3103/info lpd is the print spooling daemon. It is used to support network printing on a variety of unix platforms. The version of lpd that ships with linux systems invokes groff to process documents that are to be printed. The groff utility used to...

CVE-2000-0839

WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port 515...

CVE-2000-0879

LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services...

CVE-2000-0879

LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services...

CVE-2000-0879

CVE-2000-0879: LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world‑executable, which allows arbitrary local users to start and stop various LPD services. The provided documents do not include exploitation details or remediation in...

DoS через WinCOM LPD

Большое число LPD-параметров приводят к утечке памяти...

VIGILANTE-2000013: WinCOM LPD DoS

WinCOM LPD DoS Advisory Code: VIGILANTE-2000013 Release Date: September 19, 2000 Systems Affected: - WinCOM LPD V1.00.90 for Windows NT THE PROBLEM A continuos stream of LPD options, sent to the LPD port default TCP port 515 on the host running WinCOM, will eventually consume all the memory on th...

VIGILANTE-2000013.txt

WinCOM LPD DoS Advisory Code: VIGILANTE-2000013 Release Date: September 19, 2000 Systems Affected: - WinCOM LPD V1.00.90 for Windows NT THE PROBLEM A continuos stream of LPD options, sent to the LPD port default TCP port 515 on the host running WinCOM, will eventually consume all the memory on th...