Microsoft Windows SMB Service Detection

The remote service understands the CIFS Common Internet File System or Server Message Block SMB protocol, used to provide shared access to files, printers, etc between nodes on a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11011; scriptversion"1.43";...

CVE-2002-0305

Zero One Tech ZOT P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge...

CVE-2002-0235

Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event...

CVE-2002-0305

CVE-2002-0305 concerns the Zero One Tech (ZOT) P100s print server, which does not properly disable the SNMP service or change the default password. The underlying issue allows potential unauthorized access without administrator awareness, as described in the NVD entry. The impact is described as ...

CVE-2002-0235

Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event...

CVE-2002-0305

Zero One Tech ZOT P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge...

CVE-2002-0235

Castelle FaxPress (likely v6.3 and other versions) is affected when configured to use the Network print queue. An incorrect login can cause FaxPress to leak the correct username and password in plaintext in an error event. This may impact confidentiality and integrity (PARTIAL) and could affect a...

CVE-2002-0235: Undefined Security Weakness

Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event...

Microsoft Windows 'Print Operators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Print Operators' group. Members of this group can manage printers within a Windows Domain or shutdown a server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10905; scriptversion"1.20"...

CVE-2001-0551

CVE-2001-0551 corresponds to a buffer overflow in the CDE Print Viewer (dtprintinfo) that enables a local attacker to execute arbitrary code, potentially as root, by overflowing the Help window search field via the clipboard. Connected advisories confirm impact on multiple platforms (Solaris 2.4–...

CVE-2001-0551

Buffer overflow in CDE Print Viewer dtprintinfo allows local users to execute arbitrary code by copying text from the clipboard into the Help window...

CVE-2001-0551: Undefined Security Weakness

Buffer overflow in CDE Print Viewer dtprintinfo allows local users to execute arbitrary code by copying text from the clipboard into the Help window...

Castelle Faxpress: Password used for NT Print queue can be discl osed in Plain Text

Overview I have reported this to Castelle and they told me it is a feature for troubleshooting, however they will make the change the next time they release the Faxpress Software. I just thought that other admins should be made aware so they can check their systems are secured correctly. Printing...

[SECURITY] [DSA 107-1] New jgroff packages fix printf format problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 107-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2002 - -------------------------------------------------------------------------- Package : jgroff...

CDE dtprintinfo contains local buffer overflow in Help window via clipboard copy

Overview The CDE Print Viewer program dtprintinfo provides a graphical interface display the status of print queues and print jobs. By using the clipboard to overflow the search field in the Help window of dtprintinfo, a local attacker can execute arbitrary code on the system as root. Description...

CVE-2001-0809

Vulnerability in CIFS/9000 Server SAMBA A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources...

CVE-2001-0809

The CVE-2001-0809 issue affects HP-UX 11.0/11.11 CIFS/9000 Server (SAMBA) prior to patch A.01.06. When configured as a print server, local users can overwrite arbitrary files by modifying certain resources. The vulnerability is documented in HP patch PHNE_24164 (A.01.06) for s700/s800 11.X CIFS/9...

CVE-2001-0817

The CVE-2001-0817 issue affects HP-UX rlpdaemon (line printer daemon) across HP-UX releases 10.01 through 11.11. The vulnerability is a remote/logic flaw in rlpdaemon that allows a crafted print request to create arbitrary files or directories and gain superuser privileges. Evidence from multiple...

CVE-2001-0809

Vulnerability in CIFS/9000 Server SAMBA A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources...

lpplus.txt

Multiple Security Holes in LPPlus --------------------------------- echo8, 8/23/2000 Summary ------- LPPlus is Plus Technologies' print management system for unix. Versions prior to v3.3.x have several serious security holes, some of which undermine the integrity of the printing subsystem, some o...