[6997] in bugtraq
Re: Security problems on SCO's lp subsystem
daemon@ATHENA.MIT.EDU (Bela Lubkin)
Fri Jun 19 18:20:53 1998
Date: Fri, 19 Jun 1998 14:19:31 -0700
Reply-To: Bela Lubkin <belal@SCO.COM>
From: Bela Lubkin <belal@SCO.COM>
To: BUGTRAQ@NETSPACE.ORG
I forgot to explicitly state the perhaps-obvious workaround: do not
enable the Berkeley lpd client. It should be sufficient to move aside
/etc/printcap and /usr/spool/lpd, then run `mkdev rlp`, tell it to
"remove remote printing". The SysV spooler can do remote printing with
any available remote command processor (rcmd (nee rsh), etc.), which
could be used to shunt jobs to a different system's lpd client.
I'm working on fixes for the whole mess.
>Bela<
