Intermec PM43 Industrial Printer - Local Privilege Escalation

Intermec PM43 Industrial Printer - Local Privilege Escalation TITLE: Intermec Industrial Printers Local root with Busybox jailbreak Date: March 28th, 2017 Author: Bourbon Jean-marie kmkz from AKERVA company | @kmkzsecurity Product Homepage: http://www.intermec.com/products/prtrpm43a/ Firmware...

Intermec PM43 Industrial Printer Privilege Escalation

TITLE: Intermec Industrial Printers Local root with Busybox jailbreak Date: March 28th, 2017 Author: Bourbon Jean-marie kmkz from AKERVA company | @kmkzsecurity Product Homepage: http://www.intermec.com/products/prtrpm43a/ Firmware download: http://www.intermec.com/products/prtrpm43a/downloads.as...

Intermec PM43 Industrial Printer - Local Privilege Escalation

TITLE: Intermec Industrial Printers Local root with Busybox jailbreak Date: March 28th, 2017 Author: Bourbon Jean-marie kmkz from AKERVA company | @kmkzsecurity Product Homepage: http://www.intermec.com/products/prtrpm43a/ Firmware download: http://www.intermec.com/products/prtrpm43a/downloads.as...

samba security and bug fix update

3.6.23-41.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.23-41 - resolves: 1413672 - Auth regression after secret changed 3.6.23-40 - resolves: 1405356 - CVE-2016-2125 CVE-2016-2126 3.6.23-39 - resolves: 1297805 - Fix issues with printer unpublishing...

Debian Security Advisory DSA 3816-1 (samba - security update)

Jann Horn of Google discovered a time-of-check, time-of-use race condition in Samba, a SMB/CIFS file, print, and login server for Unix. A malicious client can take advantage of this flaw by exploting a symlink race to access areas of the server file system not exported under a share definition...

Pharos PopUp Printer Client Denial of Service Vulnerability

Pharos PopUp Printer Client is a suite of printer client software from Pharos Systems International. A denial of service vulnerability exists in Pharos PopUp Printer Client. An attacker could exploit this vulnerability to crash the application, resulting in a denial of service...

Managing Printer Deployment Using Layers in the Unidesk Environment

While many brokering and persona management solutions provide mechanisms to manage printer deployment, you might find it easier to use Unidesk layers. Unidesk layers provide a flexible mechanism for managing printer deployments for different groups of users. When you use Unidesk layers to deploy...

Pharos PopUp Printer Client Heap Buffer Overflow Vulnerability (CNVD-2017-02628)

Pharos PopUp Printer Client is a suite of printer client software from Pharos Systems International. A heap buffer overflow vulnerability exists in Pharos PopUp Printer Client version 9.0, which originates when the program fails to adequately perform bounds detection on user-submitted data,...

Pharos PopUp Printer Client Heap Buffer Overflow Vulnerability

Pharos PopUp Printer Client is a suite of printer client software from Pharos Systems International. A heap buffer overflow vulnerability exists in Pharos PopUp Printer Client version 9.0. An attacker could exploit this vulnerability to execute arbitrary code in the context of the affected...

CVE-2017-2786

A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read causing a crash and a denial of service...

Heap overflow

An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always listening, has...

Heap overflow

A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening, has ro...

CVE-2017-2788

A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening, has ro...

CVE-2017-2786

A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read causing a crash and a denial of service...

CVE-2017-2787

A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening, has ro...

CVE-2017-2785

Summary: CVE-2017-2785 involves a heap-based buffer overflow in the Pharos PopUp Printer Client 9.0 (psnotifyd). The DecodeString logic processes attacker-controlled packet data, enabling a crafted input to overflow a heap buffer and potentially execute code remotely. The vulnerable component is ...

CVE-2017-2788

Pharos PopUp Printer Client 9.0 is affected in its psnotifyd component. The DecodeBinary path processes attacker-controlled data from network packets, leading to a heap-based buffer overflow. In a sequence, data from the packet is XOR-deobfuscated via a loop and written to attacker-controlled mem...

CVE-2017-2786

A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read causing a crash and a denial of service...

CVE-2017-2788: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening, has ro...

CVE-2017-2786: Out-of-bounds Read

A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read causing a crash and a denial of service...