RHEL 5 : hplip (RHSA-2008:0818)

Updated hplip packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The hplip Hewlett-Packard Linux Imaging and Printing packages provide drivers for...

Cross site scripting

Cross-site scripting XSS vulnerability in the embedded web server in Xerox 4110, 4590, and 4595 Copier/Printers allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2008-2743

Cross-site scripting XSS vulnerability in the embedded web server in Xerox 4110, 4590, and 4595 Copier/Printers allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2008-2743

Cross-site scripting XSS vulnerability in the embedded web server in Xerox 4110, 4590, and 4595 Copier/Printers allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2008-2743

CVE-2008-2743 is a cross-site scripting (XSS) vulnerability in the embedded web server of Xerox 4110, 4590, and 4595 Copier/Printers. It allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. CVSSv2 base score: 4.3 (MEDIUM) with network attack vector, no confid...

NEC MultiWriter 1700C/7500C FTP server vulnerability

Overview NEC printers contain a vulnerability which allow connection to external FTP servers via the printer's internal FTP server. Although the printer's FTP server can connect to a target FTP server, it cannot send files to a target FTP server. Impact A remote attacker could possibly conduct a...

FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers

Overview Multiple Canon digital multifunction copiers and laser beam printers contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server. The Canon Color imageRUNNER Series, imageRUNNER Series, imagePRESS Series, and laser beam printer...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : cupsys vulnerabilities (USN-598-1)

It was discovered that the CUPS administration interface contained a heap- based overflow flaw. A local attacker, and a remote attacker if printer sharing is enabled, could send a malicious request and possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS, 6.10, and 7.04. In...

CUPS: Multiple vulnerabilities

Background CUPS provides a portable printing layer for UNIX-based operating systems. Description Multiple vulnerabilities have been reported in CUPS: regenrecht VeriSign iDefense discovered that the cgiCompileSearch function used in several CGI scripts in CUPS' administration interface does not...

JVN#10056705 FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers

The Canon Color imageRUNNER Series, imageRUNNER Series, imagePRESS Series, and laser beam printer series are digital multifunction copiers and printers. Some of these products contain a vulnerability that could allow a remote attacker to access other network devices via a built-in FTP server...

[SECURITY] Fedora 8 Update: ghostscript-8.61-8.fc8

Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...

CVE-2008-0303

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce...

CVE-2008-0303

The Canon FTP bounce vulnerability (CVE-2008-0303) affects Canon Multi Function Devices including the Color imageRUNNER Series, imageRUNNER Series, imagePRESS Series, and related laser beam printers. A built-in FTP server can be leveraged via a modified FTP PORT command to act as a proxy, enablin...

CVE-2008-0303

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce...

Memory corruption

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

CVE-2008-0596

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

CVE-2008-0596

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

cups: memory leak handling IPP browse requests

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

WinComLPD LPD Monitoring Server Authentication Bypass

The remote installation of WinComLPD fails to ensure that authentication to its LPD Monitoring Server has been successful before processing requests. A remote attacker can leverage this issue to bypass authentication and gain administrative control of the affected application. Note that there are...

CVE-2007-5764

CVE-2007-5764 is a buffer overflow in the pioout program of printers.rte on IBM AIX 5.2/5.3/6.1 that allows local users to gain privileges via a long command line option. Connected Nessus/NVD entries confirm the issue in multiple AIX releases and indicate root-privilege execution via setuid root ...