[USN-2532-1] cups-filters vulnerability

========================================================================== Ubuntu Security Notice USN-2532-1 March 16, 2015 cups-filters vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...

[SECURITY] [DLA 174-1] tcpdump security update

Package : tcpdump Version : tcpdump4.1.1-1+deb6u2 CVE ID : CVE-2015-0261 CVE-2015-2154 CVE-2015-2155 Several issues have been discovered with tcpdump in the way it handled some printer protocols. Those issues can lead to denial of service, or, potentially, execution of arbitrary code. CVE-2015-02...

PT-2015-4550

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.7.2 Description The issue is caused by an integer signedness error in the mobility opt print function, which is part of the IPv6 mobility printer. This error allows remote attackers to potentially cause a denial of...

Ubuntu: Security Advisory (USN-2532-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2532-1 cups-filters vulnerability

It was discovered that cups-browsed incorrectly filtered remote printer names and strings. A remote attacker could use this issue to possibly execute arbitrary commands...

[security bulletin] HPSBHF03279 rev.1 - HP Point of Sale PCs Running Windows with OPOS Drivers, Remote Execution of Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04583185 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04583185 Version: 1 HPSBHF03279 rev....

Hewlett-Packard POS Printer Windows And OPOS Drivers OPOSCashDrawer.ocx Open Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard POS Printer Windows and OPOS Drivers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specifi...

Hewlett-Packard POS Printer Windows and OPOS Drivers OPOSCheckScanner.ocx Open Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard POS Printer Windows and OPOS Drivers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specifi...

Hewlett-Packard POS Printer Windows And OPOS Drivers OPOSMICR.ocx Open Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard POS Printer Windows and OPOS Drivers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specifi...

Hewlett-Packard POS Printer Windows and OPOS Drivers OPOSPOSPrinter.ocx Open Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard POS Printer Windows and OPOS Drivers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specifi...

HP Point of Sale PCs Running Windows with OPOS Drivers Arbitrary Code Execution Vulnerability (CNVD-2015-01598)

HP Point of Sale PCs Running Windows with OPOS Drivers is a set of OPOS drivers from Hewlett-Packard HP that run on the Windows operating system for Hewlett-Packard point-of-sale terminals. A security vulnerability exists in the OPOSPOSPrinter.ocx file in various printer devices in versions prior...

cups: allows local users to read arbitrary files via a symlink attack

It was discovered that CUPS allowed certain users to create symbolic links in certain directories under /var/cache/cups/. A local user with the 'lp' group privileges could use this flaw to read the contents of arbitrary files on the system or, potentially, escalate their privileges on the system...

Printer File Deletion Scanner

This module deletes a file on a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer File Deletion...

Printer File Upload Scanner

This module uploads a file to a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer File Upload Scanner"...

Debian Security Advisory DSA 3171-1 (samba - security update)

Richard van Eeden of Microsoft Vulnerability Research discovered that Samba, a SMB/CIFS file, print, and login server for Unix, contains a flaw in the netlogon server code which allows remote code execution with root privileges from an unauthenticated connection. OpenVAS Vulnerability Test $Id:...

Cross site scripting

Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages...

CVE-2015-1056

Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages...

CVE-2015-1056

The CVE-2015-1056 entry describes a cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printers, exploitable through the web interface (e.g., general/status.html) via the url parameter. Affected firmware is before version L; the root cause is improper handling/validation of URL param...

RedStar-3.0-Desktop-Escalation

Alternative steps: https://pbs.twimg.com/media/B68inqBIQAA5sK6.png Proof: https://github.com/HackerFantastic/Public/blob/master/exploits/redstar3.0-localroot.png cp /etc/udev/rules.d/85-hplj10xx.rules /tmp/udevhp.bak echo 'RUN+="/bin/bash /tmp/r00t.sh"' /etc/udev/rules.d/85-hplj10xx.rules cat...

Multiple Cross-Site Scripting Vulnerabilities in Brother MFC-J4410DW Printer 'url' Parameter

Brother MFC-J4410DW is a color laser printer device that supports wireless network printing. Multiple cross-site scripting vulnerabilities exist in the Brother MFC-J4410DW printer 'url' parameter because it fails to properly filter user-supplied input. An attacker could use these vulnerabilities ...