CVE-2000-0879

LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services...

DoS через WinCOM LPD

Большое число LPD-параметров приводят к утечке памяти...

VIGILANTE-2000013: WinCOM LPD DoS

WinCOM LPD DoS Advisory Code: VIGILANTE-2000013 Release Date: September 19, 2000 Systems Affected: - WinCOM LPD V1.00.90 for Windows NT THE PROBLEM A continuos stream of LPD options, sent to the LPD port default TCP port 515 on the host running WinCOM, will eventually consume all the memory on th...

VIGILANTE-2000013.txt

WinCOM LPD DoS Advisory Code: VIGILANTE-2000013 Release Date: September 19, 2000 Systems Affected: - WinCOM LPD V1.00.90 for Windows NT THE PROBLEM A continuos stream of LPD options, sent to the LPD port default TCP port 515 on the host running WinCOM, will eventually consume all the memory on th...

LPRng lpd should not be SETUID root

Well, even in spite of all of my efforts, care, and paranoia, I finally dropped the hammer on my foot. Luckily it appears that I spotted this loophole before somebody on the LPRng mailing list did. Or worse yet, got a call from CERT about this problem :- SUMMARY: Versions of...

CVE-1999-0061

CVE-1999-0061 concerns the BSD line printer daemon (lpd). Multiple sources confirm a vulnerability in lpd related to file creation and deletion and remote execution. Affected software is BSD-derived lpd implementations; the root cause is not explicitly detailed in the provided documents. Reported...

RedHat 6.1 IRIX 6.5.18 - lpd Command Execution

RedHat 6.1 IRIX 6.5.18 - lpd Command Execution source: https://www.securityfocus.com/bid/927/info Multiple vulnerabilities have been discovered in lpd, shipped with various Linux and Unix distributions. It has been reported that lpd fails to properly authenticate hostnames. This could allow an...

RedHat 6.1 / IRIX 6.5.18 - 'lpd' Command Execution

source: https://www.securityfocus.com/bid/927/info Multiple vulnerabilities have been discovered in lpd, shipped with various Linux and Unix distributions. It has been reported that lpd fails to properly authenticate hostnames. This could allow an unauthenticated user to gain access to lpd servic...

[SECURITY] New versions of lpr released

The version of lpr that was distributed with Debian GNU/Linux 2.1 suffers from a couple of problems: there was a race in lpr that could be exploited by users to print files they can not normally read lpd did not check permissions of queue-files. As a result by using the -s flag it could be tricke...

CVE-1999-0299

CVE-1999-0299 corresponds to a buffer overflow in the FreeBSD lpd daemon triggered by long DNS hostnames. Connected sources (Nessus plugin) identify the affected product as FreeBSD 2.x lpd and note remediation by upgrading to FreeBSD 3.x. The description and Red Hat/NVD entries reiterate the same...

SCO_lpr_vuln.txt

Subject: SCO 5.0.5 lpr local root exploit To: [email protected] Greetings, There is a hole in SCO 5.0.5, probably 5.0.x, /usr/bin/lpr. Or more accurately, /usr/lpd/remote/lp, which lpr execs and passes your command line args on to. This means that while /usr/bin/lpr is sgid lp, we'll stil...

FreeBSD-SA-97:02.lpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-97:02 Security Advisory FreeBSD, Inc. Topic: Buffer overflow in lpd Category: core Module: lpd Announced: 1997-03-26 Affects: FreeBSD 2.1.7 and earlier and FreeBSD 2.2...