7823 matches found
CVE-2003-1057: Undefined Security Weakness
Unknown vulnerability in CDE Print Viewer dtprintinfo for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code...
Linksys PSUS4 print server DoS
Invalid Web interface POST requests processing causes device to crash...
CUPS: Stack overflow in included Xpdf code
Background The Common UNIX Printing System CUPS is a cross-platform print spooler. It makes use of Xpdf code to handle PDF files. Description The Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Length tags in PDF files GLSA 200501-28...
CVE-2004-0829
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service daemon crash by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2...
CVE-2004-2166
The print-from-email feature in the Canon ImageRUNNER iR 5000i and C3200 digital printer, when not using IP address range filtering, allows remote attackers to print arbitrary text without authentication via a text/plain email to TCP port 25...
hppsc2510.txt
Product Name: HP PSC 2510 Summary: Ftp print service is not configurable This printer comes with an ftp daemon which allows anonymous access, and drops the user into a write only directory. By default anyone from anywhere can drop a file into this directory and the printer will print the document...
USN-2-1: xpdf vulnerabilities
Chris Evans discovered several integer overflow vulnerabilities in xpdf, a viewer for PDF files. The Common UNIX Printing System CUPS also uses the same code to print PDF files. In either case, these vulnerabilities could be exploited by an attacker by providing a specially crafted PDF file which...
Fedora Core 2 : foomatic-3.0.1-3.1 (2004-303)
Sebastian Krahmer reported a bug in the cupsomatic and foomatic-rip print filters, used by the CUPS print spooler. An attacker who has printing access could send a carefully named file to the print server causing arbitrary commands to be executed as root. The Common Vulnerabilities and Exposures...
GLSA-200409-24 : Foomatic: Arbitrary command execution in foomatic-rip filter
The remote host is affected by the vulnerability described in GLSA-200409-24 Foomatic: Arbitrary command execution in foomatic-rip filter There is a vulnerability in the foomatic-filters package. This vulnerability is due to insufficient checking of command-line parameters and environment variabl...
FreeBSD : cups -- print queue browser denial-of-service (27)
The following package needs to be updated: cups-base %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg05dcf751073311d9b45d000c41e2cdad.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
[GLSA-200409-14] Samba: Remote printing vulnerability
The remote host is affected by the vulnerability described in GLSA-200409-14 Samba: Remote printing vulnerability Due to a bug in the printernotifyinfo function, authorized users could potentially crash the Samba server by sending improperly handled print change notification requests in an invali...
CVE-2001-1279: Undefined Security Weakness
Buffer overflow in print-rx.c of tcpdump 3.x probably 3.6x allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026...
cups -- print queue browser denial-of-service
If the CUPS server cupsd receives a zero-length UDP message, it will disable its print queue browser service...
Novell NetWare Print Server Detection
Binary data 4542.prm...
DEBIAN-CVE-2004-0591
Cross-site scripting XSS vulnerability in the printheaderuc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via 1 e-mail headers or 2 a message with a "message/delivery-status" MIME Content-Type...
Adam Ismay Print Topic Mod 1.0 - SQL Injection
Adam Ismay Print Topic Mod 1.0 - SQL Injection source: https://www.securityfocus.com/bid/10757/info Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied UR...
Adam Ismay Print Topic Mod 1.0 - SQL Injection
source: https://www.securityfocus.com/bid/10757/info Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL...
Solaris 2.6 (x86) : 106438-04
CDE 1.2x86: Print Manager Patch. Date this patch was last updated by Sun : Dec/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...
RHEL 2.1 : LPRng (RHSA-2002:120)
The LPRng print spooler, as shipped in Red Hat Linux Advanced Server 2.1, accepts all remote print jobs by default. Updated LPRng packages are available to fix this issue. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation...
RHEL 2.1 : tetex (RHSA-2002:195)
Updated packages for dvips are available which fix a vulnerability allowing print users to execute arbitrary commands. Updated 13 Aug 2003 Added tetex-doc package that was originally left out of the errata. The dvips utility converts DVI format into PostScriptTM, and is used in Red Hat Linux as a...