[14279] in bugtraq
Re: [ Hackerslab bug_paper ] Linux printtool get printer passwor
daemon@ATHENA.MIT.EDU (Brian Knotts)
Tue Mar 14 20:17:25 2000
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Mime-Version: 1.0
Message-Id: <XFMail.20000313112850.bknotts@slappy.org>
Date: Mon, 13 Mar 2000 11:28:50 -0800
Reply-To: Brian Knotts <bknotts@SLAPPY.ORG>
From: Brian Knotts <bknotts@SLAPPY.ORG>
X-To: Sheshep ankh Dubhe <dubhe@DUAT.DHS.ORG>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <200003081943.EAA30620@duat.dhs.org>
On 08-Mar-2000 Sheshep ankh Dubhe wrote:
> [ Hackerslab bug_paper ] Linux printtool get printer password
>
> File : /usr/bin/printtool
>
> SYSTEM : Linux
>
> INFO :
>
> If make printer configuration by printtool package, It make vule config file.
> Config file perrmission is "-rw-r--r-- root root".
> If use samba network printer, password stored in config file.
>
> Tested platform : RedHat 6.1 - 6.2B
> printtool-3.41-2
> printtool-3.42-3ac
> printtool-3.43-1
I fixed my /usr/bin/printtool (v. 3.41) with:
2302a2303,2307
> #
> # set the .config permissions to something sane
> #
> catch {exec chown root.lp $smb_config}
> catch {exec chmod 600 $smb_config}
2465a2471,2475
> #
> # set the .config permissions to something sane
> #
> catch {exec chown root.lp $ncp_config}
> catch {exec chmod 600 $ncp_config}
Seems to work.
--
--------------------------------------------------------------------------------
Brian Knotts bknotts@slappy.org
