Foomatic: Arbitrary command execution in foomatic-rip filter

Background Foomatic is a system for connecting printer drivers with spooler systems such as CUPS and LPD. The foomatic-filters package contains wrapper scripts which are designed to be used with Foomatic. Description There is a vulnerability in the foomatic-filters package. This vulnerability is...

MDKSA-2004:097 - Updated cups packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: cups Advisory ID: MDKSA-2004:097 Date: September 15th, 2004 Affected versions: 10.0, 9.2, Corporate Server 2.1 Problem Description: Alvaro Martinez Echevarria discovered a vulnerability in the CUPS...

MDKSA-2004:094 - Updated printer-drivers packages fix vulnerability in foomatic

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: printer-drivers Advisory ID: MDKSA-2004:094 Date: September 15th, 2004 Affected versions: 10.0, 9.2 Problem Description: The foomatic-rip filter, which is part of foomatic-filters package, contains ...

Mandrake Linux Security Advisory : printer-drivers (MDKSA-2004:094)

The foomatic-rip filter, which is part of foomatic-filters package, contains a vulnerability that allows anyone with access to CUPS, local or remote, to execute arbitrary commands on the server. The updated packages provide a fixed foomatic-rip filter that prevents this kind of abuse. %NASLMINLEV...

Samba: Remote printing non-vulnerability

Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Description Due to a bug in the printernotifyinfo function, authorized users could potentially crash their smbd process by sending improperly...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

[SA12397] Samba Printer Change Notification Request Denial of Service Vulnerability

TITLE: Samba Printer Change Notification Request Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12397 VERIFY ADVISORY: http://secunia.com/advisories/12397/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Samba 2.x http://secunia.com/product/1271/ DESCRIPTION: A...

Samba Printer Change Notification DoS

DoS on FindNextPrintChangeNotify request processing...

Generic Shell Detection (Printer Telnet)

Binary data 1935.prm...

Dell Printer Administrative Web Console Detection

Binary data 4527.prm...

Mandrake Linux Security Advisory : printer-drivers (MDKSA-2003:010)

Karol Wiesek and iDefense disovered three vulnerabilities in the printer-drivers package and tools it installs. These vulnerabilities allow a local attacker to empty or create any file on the filesystem. The first vulnerability is in the mtink binary, which has a buffer overflow in its handling o...

RHEL 2.1 : samba (RHSA-2004:404)

Updated samba packages that fix a buffer overflow issue are now available. Samba provides file and printer sharing services to SMB/CIFS clients. The Samba team discovered a buffer overflow in the code used to support the 'mangling method = hash' smb.conf option. The Common Vulnerabilities and...

AppSocket & socketAPI Printers - Do Not Scan

The host seems to be an AppSocket or socketAPI printer. Scanning it will likely waste paper. Therefore, port 9100 won't be scanned. This script was written by Laurent Facq 05/2004 99% based on dontscanprinters by Michel Arboi Released under GPLv2 plugin : dontprintonprinters.nasl after suggesting...

Lexmark / Dell Printer Unauthenticated Access

The remote printer has no password set. This allows anyone to change its IP or potentially to intercept print jobs sent to it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12236; scriptversion "$Revision: 1.14 $"; scriptcvsdate"$Date: 2013/01/25 01:19:09 $";...

HP Web Jetadmin 7.5.2456 - Printer Firmware Update Script Arbitrary File Upload

source: https://www.securityfocus.com/bid/9971/info HP Web Jetadmin is prone to an issue which may permit remote users to upload arbitrary files to the management server. This issue exists in the printer firmware update script. Given the ability to place arbitrary files on the server to an...

CVE-2003-0257

Technical details (affected components, root cause, impact specifics, or fixes) are not publicly available in the provided documents. Monitor for updates from reliable sources; current records only reiterate a format-string vulnerability in IBM AIX printer capability.

[Full-Disclosure] Get admin rights using Doro (pdf creator)

Hi, a few days ago i discovered a bug in Doro. Doro is a free tool to create pdf files from any windows program. After installing Doro you have a new printer called 'Doro PDF Writer'. If you select 'Print' the spooler calls the printer filter 'doro.dll'. The 'doro.dll' then starts 'doro.exe' and ...

Linux groff utility pic contains format string vulnerability

Overview The pic component of the image processing package groff contains a format string vulnerability that could allow a remote attacker to execute arbitrary code. Description groff is an image processing package on Linux systems. A component of groff called pic contains a format-string...

CUPS Printer List Disclosure

The remote host is running CUPS Common Unix Printing System. It is possible to connect to this port and browse '/printers' to obtain the list of printers this host can access. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc...