CVE-2003-0257: Undefined Security Weakness

Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges...

[Full-Disclosure] Get admin rights using Doro (pdf creator)

Hi, a few days ago i discovered a bug in Doro. Doro is a free tool to create pdf files from any windows program. After installing Doro you have a new printer called 'Doro PDF Writer'. If you select 'Print' the spooler calls the printer filter 'doro.dll'. The 'doro.dll' then starts 'doro.exe' and ...

Linux groff utility pic contains format string vulnerability

Overview The pic component of the image processing package groff contains a format string vulnerability that could allow a remote attacker to execute arbitrary code. Description groff is an image processing package on Linux systems. A component of groff called pic contains a format-string...

CUPS Printer List Disclosure

The remote host is running CUPS Common Unix Printing System. It is possible to connect to this port and browse '/printers' to obtain the list of printers this host can access. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc...

[SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 285-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...

HP JetDirect < Q.24.09 Multiple Vulnerabilities

The remote HP JetDirect is, according to its version number, vulnerable to an issue that may allow an attacker to gain unauthorized access on this printer, or crash it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11396; scriptversion"1.14"; scriptbugtraqid7070;...

HP JetDirect Printer - SNMP JetAdmin Device Password Disclosure

HP JetDirect J2552A/J2552B/J2591A/J3110A/J3111A/J3113A/J3263A/300.0 X Printer SNMP JetAdmin Device Password Disclosure Vulnerability source: https://www.securityfocus.com/bid/7001/info A problem with JetDirect printers could make it possible for a remote user to gain administrative access to the...

Buffer overflow in Mandrake printer drivers

Buffer overflows in different drivers...

HPUX disable buffer overflow vulnerability

======================================================= HPUX disable buffer overflow vulnerability ======================================================= Davide Del Vecchio Adv4 Date: 13/02/2003 Tested on HP-UX B.11.00 Description: The enable command activates the named printers, enabling them t...

CVE-2003-0035

Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument...

CVE-2003-0035

Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument...

CVE-2003-0035

CVE-2003-0035 is a local vulnerability in Mandrake Linux’s printer-drivers package, specifically a buffer overflow in the escputil utility when parsing the --printer-name argument. The issue arises when escputil is installed with elevated privileges (setuid/sgid), enabling a local user to execute...

CVE-2003-0034

The provided documents confirm CVE-2003-0034 affects the mtink status monitor included in Mandrake Linux printer-drivers. The root cause is a buffer overflow when handling a long HOME environment variable, enabling a local attacker to execute arbitrary code. Additional vulnerabilities exist in re...

CVE-2003-0036

The CVE refers to Mandrake Linux printer-drivers (ml85p) where a race condition in opening a temporary file allows a local attacker to overwrite arbitrary files via symlink attacks on files named mlg85p%d. Affected component: ml85p within the printer-drivers package; root cause: predictable tempo...

CVE-2003-0036

ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d"...

CVE-2003-0036: Undefined Security Weakness

ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d"...

iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package http://www.idefense.com/advisory/01.21.03.txt January 21, 2003 I. BACKGROUND MandrakeSoft Inc.'s Mandrake Linux includes the printer-drivers package in mos...

CVE-2003-0034: Undefined Security Weakness

Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2003-0035: Undefined Security Weakness

Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument...

Important: Red Hat Security Advisory: : Updated CUPS packages fix various vulnerabilities

Updated CUPS packages are available for Red Hat Linux 7.3 and 8.0 which fix various security issues. The Common UNIX Printing System CUPS provides a portable printing layer. A number of vulnerabilities have been discovered in CUPS. CUPS was distributed with Red Hat Linux 7.3 and 8.0 but is not...