6715 matches found
USN-2-1: xpdf vulnerabilities
Chris Evans discovered several integer overflow vulnerabilities in xpdf, a viewer for PDF files. The Common UNIX Printing System CUPS also uses the same code to print PDF files. In either case, these vulnerabilities could be exploited by an attacker by providing a specially crafted PDF file which...
Fedora Core 2 : foomatic-3.0.1-3.1 (2004-303)
Sebastian Krahmer reported a bug in the cupsomatic and foomatic-rip print filters, used by the CUPS print spooler. An attacker who has printing access could send a carefully named file to the print server causing arbitrary commands to be executed as root. The Common Vulnerabilities and Exposures...
GLSA-200409-24 : Foomatic: Arbitrary command execution in foomatic-rip filter
The remote host is affected by the vulnerability described in GLSA-200409-24 Foomatic: Arbitrary command execution in foomatic-rip filter There is a vulnerability in the foomatic-filters package. This vulnerability is due to insufficient checking of command-line parameters and environment variabl...
FreeBSD : cups -- print queue browser denial-of-service (27)
The following package needs to be updated: cups-base %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg05dcf751073311d9b45d000c41e2cdad.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
[GLSA-200409-14] Samba: Remote printing vulnerability
The remote host is affected by the vulnerability described in GLSA-200409-14 Samba: Remote printing vulnerability Due to a bug in the printernotifyinfo function, authorized users could potentially crash the Samba server by sending improperly handled print change notification requests in an invali...
cups -- print queue browser denial-of-service
If the CUPS server cupsd receives a zero-length UDP message, it will disable its print queue browser service...
Novell NetWare Print Server Detection
Binary data 4542.prm...
DEBIAN-CVE-2004-0591
Cross-site scripting XSS vulnerability in the printheaderuc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via 1 e-mail headers or 2 a message with a "message/delivery-status" MIME Content-Type...
Adam Ismay Print Topic Mod 1.0 - SQL Injection
Adam Ismay Print Topic Mod 1.0 - SQL Injection source: https://www.securityfocus.com/bid/10757/info Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied UR...
Adam Ismay Print Topic Mod 1.0 - SQL Injection
source: https://www.securityfocus.com/bid/10757/info Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL...
Solaris 2.6 (x86) : 106438-04
CDE 1.2x86: Print Manager Patch. Date this patch was last updated by Sun : Dec/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...
RHEL 2.1 : LPRng (RHSA-2002:120)
The LPRng print spooler, as shipped in Red Hat Linux Advanced Server 2.1, accepts all remote print jobs by default. Updated LPRng packages are available to fix this issue. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation...
RHEL 2.1 : LPRng (RHSA-2003:150)
Updated LPRng packages resolving a temporary file vulnerability are now available. LPRng is a print spooler. LPRng includes a program, psbanner, that can be used to produce Postscript banner pages to separate print jobs. A vulnerability has been found in psbanner, which creates in an insecure...
RHEL 2.1 : tetex (RHSA-2002:195)
Updated packages for dvips are available which fix a vulnerability allowing print users to execute arbitrary commands. Updated 13 Aug 2003 Added tetex-doc package that was originally left out of the errata. The dvips utility converts DVI format into PostScriptTM, and is used in Red Hat Linux as a...
PT-2004-1353 · Tcpdump · Tcpdump
Name of the Vulnerable Software and Affected Versions: tcpdump versions 3.8.1 and earlier Description: The issue is caused by an integer underflow in the isakmp id print function for TCPDUMP, allowing remote attackers to cause a denial of service crash via an ISAKMP packet with an Identification...
DEBIAN-CVE-2003-1029
The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...
security flaw
The printattrstring function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service segmentation fault via a RADIUS attribute with a large length value...
CVE-2003-1029
The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...
irssi - potential remote crash
irssi 0.8.9 release fixes a vulnerability that allows normal IRC users to remotely crash another user's irssi client, provided that either of these conditions is met: a irssi is running on an architecture that requires memory alignmentation ie. not x86 b "gui print text" signal is being used by...
