OSVDB ID: 1945 Title: Multiple Unix Vendor lpd Incomplete Print Job Display Queue Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
A local overflow exists in multiple operating systems. The line printer daemon (lpd) fails to correctly parse an incomplete print job request, resulting in a buffer overflow. With a specially crafted request, an attacker can execute arbitrary code resulting in a loss of integrity. |
Classification |
Location:
Local Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Unavailable Disclosure: OSVDB Verified |
Solution |
Upgrade to FreeBSD version 4.3-STABLE or to the RELENG_4_3 security branch after the respective correction date or higher, as it has been reported to fix this vulnerability. In addition, FreeBSD has released patches for some older versions. It is also possible to correct the flaw by implementing the following workaround: killall lpd. Upgrade to NetBSD version 1.5.2 after the respective correction date or higher, as it has been reported to fix this vulnerability. In addition, NetBSD has released patches for some older versions. It is also possible to correct the flaw by implementing the following workaround: killall lpd and/or edit /etc/hosts.lpd to prevent remote connections to lpd. OpenBSD has released a patch for some older versions. Caldera/SCO has released patches for some older versions. IBM has released a patch for some older versions. Redhat has released patches for some older versions. SuSE has released patches for some older versions. |
Products |
|
Credit |
|
iss.net - Internet Security Systems