|
|
Family: Debian Local Security Checks --> Category: infos
[DSA524] DSA-524-1 rlpr Vulnerability Scan
Vulnerability Scan Summary
DSA-524-1 rlpr
Detailed Explanation for this Vulnerability Test
jaguar@felinemenace.org discovered a format string vulnerability in
rlpr, a utility for lpd printing without using /etc/printcap. While
investigating this vulnerability, a buffer overflow was also
discovered in related code. By exploiting one of these
vulnerabilities, a local or remote user could potentially cause
arbitrary code to be executed with the rights of 1) the rlprd
process (remote), or 2) root (local).
CVE-2004-0393: format string vulnerability via syslog(3) in msg()
function in rlpr
CVE-2004-0454: buffer overflow in msg() function in rlpr
For the current stable distribution (woody), this problem has been
fixed in version 2.02-7woody1.
For the unstable distribution (sid), this problem will be fixed soon.
We recommend that you update your rlpr package.
Solution : http://www.debian.org/security/2004/dsa-524
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
