[SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 285-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...

HP JetDirect < Q.24.09 Multiple Vulnerabilities

The remote HP JetDirect is, according to its version number, vulnerable to an issue that may allow an attacker to gain unauthorized access on this printer, or crash it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11396; scriptversion"1.14"; scriptbugtraqid7070;...

HP JetDirect Printer - SNMP JetAdmin Device Password Disclosure

HP JetDirect J2552A/J2552B/J2591A/J3110A/J3111A/J3113A/J3263A/300.0 X Printer SNMP JetAdmin Device Password Disclosure Vulnerability source: https://www.securityfocus.com/bid/7001/info A problem with JetDirect printers could make it possible for a remote user to gain administrative access to the...

Buffer overflow in Mandrake printer drivers

Buffer overflows in different drivers...

HPUX disable buffer overflow vulnerability

======================================================= HPUX disable buffer overflow vulnerability ======================================================= Davide Del Vecchio Adv4 Date: 13/02/2003 Tested on HP-UX B.11.00 Description: The enable command activates the named printers, enabling them t...

CVE-2003-0035

Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument...

CVE-2003-0035

Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument...

CVE-2003-0034

The provided documents confirm CVE-2003-0034 affects the mtink status monitor included in Mandrake Linux printer-drivers. The root cause is a buffer overflow when handling a long HOME environment variable, enabling a local attacker to execute arbitrary code. Additional vulnerabilities exist in re...

CVE-2003-0035

CVE-2003-0035 is a local vulnerability in Mandrake Linux’s printer-drivers package, specifically a buffer overflow in the escputil utility when parsing the --printer-name argument. The issue arises when escputil is installed with elevated privileges (setuid/sgid), enabling a local user to execute...

CVE-2003-0036

The CVE refers to Mandrake Linux printer-drivers (ml85p) where a race condition in opening a temporary file allows a local attacker to overwrite arbitrary files via symlink attacks on files named mlg85p%d. Affected component: ml85p within the printer-drivers package; root cause: predictable tempo...

CVE-2003-0036

ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d"...

iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package http://www.idefense.com/advisory/01.21.03.txt January 21, 2003 I. BACKGROUND MandrakeSoft Inc.'s Mandrake Linux includes the printer-drivers package in mos...

Important: Red Hat Security Advisory: : Updated CUPS packages fix various vulnerabilities

Updated CUPS packages are available for Red Hat Linux 7.3 and 8.0 which fix various security issues. The Common UNIX Printing System CUPS provides a portable printing layer. A number of vulnerabilities have been discovered in CUPS. CUPS was distributed with Red Hat Linux 7.3 and 8.0 but is not...

CVE-2002-2373

The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which allows remote attackers to gain access...

CVE-2002-2201

The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

DEBIAN-CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

CVE-2002-1055

Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password...

CVE-2002-1055

CVE-2002-1055 concerns a buffer overflow in the administrative web server of the Brother NC-3100h printer. The vulnerability can be triggered remotely over the network by sending a long password, leading to denial of service; no authentication is required. The available documents do not provide e...