Important: Red Hat Security Advisory: tetex security update

Updated packages for dvips are available which fix a vulnerability allowing print users to execute arbitrary commands. Updated 13 Aug 2003 Added tetex-doc package that was originally left out of the errata. The dvips utility converts DVI format into PostScriptTM, and is used in Red Hat Linux as a...

CVE-2002-1067

Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service reboot and reset via a long password, possibly due to a buffer overflow...

CVE-2002-1067

The CVE-2002-1067 entry concerns the IC9 Pocket Print Server Firmware (versions 7.1.30 and 7.1.36f). The vulnerability is a remote denial-of-service (reboot/reset) triggered by sending a long password, with the described root cause possibly a buffer overflow. The available connected documents con...

CVE-2002-1068

The CVE-2002-1068 entry concerns the web server component of the D-Link DP-300 print server. Affected: DP-300’s web server. Vulnerability: remote attackers can cause a denial of service (hang) by sending a large HTTP POST request. Root cause details are not provided in the documents beyond this d...

CVE-2002-1016

Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing the operations, and restoring the original data files...

CVE-2002-1067

Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service reboot and reset via a long password, possibly due to a buffer overflow...

CVE-2002-1016

CVE-2002-1016 concerns the Adobe eBook Reader. Local users can bypass DRM restrictions on copy, print, lend, and give operations by backing up key data files, performing the operations, and restoring the originals. The root cause is how the DRM-enabled workflow handles key data files, enabling ci...

Important: Red Hat Security Advisory: LPRng security update

The LPRng print spooler, as shipped in Red Hat Linux Advanced Server 2.1, accepts all remote print jobs by default. Updated LPRng packages are available to fix this issue. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation...

0815 ++ */ SEH_Web

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +--+ Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/SEHWeb.txt Affected Products SEH GmbH IC9 Pocket Print Server Tested on SEH IC9 Firmware 7.1.30 and 7.1.36f...

Phenoelit Advisory #0815 ++-+ dp_300 (DLINK)

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 ++-+ Authors FX [email protected] FtR [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/dp-300.txt Affected Products D-Link DP-300+ D-Link Bug ID: Not assigned Vendor communication 07/07/02 Initial...

CVE-2002-0378

The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts...

CVE-2001-1002

The default configuration of the DVI print filter dvips in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands...

CVE-2001-1002

The CVE-2001-1002 issue affects the DVI print filter (dvips) used by lpd on Red Hat Linux 7.0 and earlier. The default configuration does not run dvips in secure mode when dvips is executed by lpd, which could allow a remote attacker to gain privileges by printing a DVI file containing malicious ...

CVE-2002-0378

The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts...

CVE-2002-0378

The CVE-2002-0378 issue concerns the LPRng print spooler defaulting to accept print jobs from arbitrary remote hosts in Red Hat Linux 7.0–7.3, Mandrake 8.1–8.2, and similar OSes. Connected advisories (e.g., RHSA-2002:120, RHSA-2002:089, MDKSA-2002:042) document that the default policy allowed rem...

Important: Red Hat Security Advisory: : Relaxed LPRng job submission policy

The LPRng print spooler, as shipped in Red Hat Linux 7.x, accepts all remote print jobs by default. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation environment. We are grateful to Matthew Caron for pointing out this...

Microsoft Windows SMB Service Detection

The remote service understands the CIFS Common Internet File System or Server Message Block SMB protocol, used to provide shared access to files, printers, etc between nodes on a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11011; scriptversion"1.43";...

CVE-2002-0305

Zero One Tech ZOT P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge...

CVE-2002-0235

Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event...

CVE-2002-0235

Castelle FaxPress (likely v6.3 and other versions) is affected when configured to use the Network print queue. An incorrect login can cause FaxPress to leak the correct username and password in plaintext in an error event. This may impact confidentiality and integrity (PARTIAL) and could affect a...