redhat-printtool.txt

Hackerslab bugpaper Linux printtool get printer password File : /usr/bin/printtool SYSTEM : Linux INFO : If make printer configuration by printtool package, It make vule config file. Config file perrmission is "-rw-r--r-- root root". If use samba network printer, password stored in config file...

CVE-1999-0564

An attacker can force a printer to print arbitrary documents e.g. if the printer doesn't require a password or to become disabled...

CVE-1999-0564

The connected NS/NVD-derived entry for CVE-1999-0564 is supported by Canon ImageRUNNER SMTP Arbitrary Content Printing details: a Canon ImageRUNNER printer with an SMTP service can receive an email that is printed, enabling an attacker to trigger arbitrary printing or a denial-of-service conditio...

CVE-1999-0061

File creation and deletion, and remote execution, in the BSD line printer daemon lpd...

CVE-2000-1221

The line printer daemon lpd in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by...

CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

DEBIAN-CVE-2000-1221

The line printer daemon lpd in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by...

CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

CVE-2000-1221

The line printer daemon lpd in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by...

DEBIAN-CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

Tektronix PhaserLink Printer Web Server Direct Request Administrator Access

The file /nclitems.html or /nclsubjects.html exist on the remote system. It is very likely that this file will allow an attacker to reconfigure your Tektronix printer. An attacker can use this to prevent the users of your network from working properly by preventing themfrom printing their files...

jetdirect.crash.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hi folks! I just played with our network printer a HP LaserJet 4500 and -- boom -- it crashed ;-=20 The HP JetDirect J3111A module with firmware G.05.35 suffers from a buffer overflow in it's...

Tektronix Phaser Network Printer 740/750/750DP/840/930 PhaserLink WebServer - Retrieve Administrator Password

source: https://www.securityfocus.com/bid/806/info Certain versions of the Tektronix PhaserLink printer ship with a webserver designed to help facilitate configuration of the device. This service is essentially administrator level access as it can completely modify the system characteristics,...

Tektronix Phaser Network Printer 740750750DP840930 PhaserLink WebServer - Retrieve Administrator Password

Tektronix Phaser Network Printer 740750750DP840930 PhaserLink WebServer - Retrieve Administrator Password source: https://www.securityfocus.com/bid/806/info Certain versions of the Tektronix PhaserLink printer ship with a webserver designed to help facilitate configuration of the device. This...

CVE-1999-1508

Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as nclitems.html and nclsubjects.html...

spoolss.txt

Printer spooler Service Vulnerabilities Systems Affected: Any NT system with a printer or the ability to print to a network printer. Microsoft Windows NT 4.0 Workstation, Server, Terminal Server all service packs Release Date: November 4, 1999 Advisory Code: AD11041999 Description: It was a typic...

Nashuatec_printer_vulns.txt

hi, The NASHUATEC D445 printer is vulnerabled to many attacks. There are 4 communs services that run in a standard configuration: httpd, ftpd, telnetd, printer. tested with nmap I discovered last day, at least three differents ways to attack this kind of boxes. First, it's possible to configure...

CVE-1999-0353

rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory...

CVE-1999-0353

CVE-1999-0353 concerns HP-UX rpc.pcnfsd, where improper handling of the main printer spool directory permissions allowed remote root access. Affected software is HP-UX on the s700/s800 series (11.x) per patch references. The root cause is described in patches noting that rpc.pcnfsd has an error i...

pinepolicy.txt

Date: Mon, 7 Sep 1998 12:18:28 +0100 From: Chris Wilson Hey people, I've discovered a vulnerability in Pine, tested on version 3.95q, but which probably applies to all versions up to 4.02. This vulnerability allows users to bypass site policies and use Pine to run arbitrary commands in the user's...