[1131] in bugtraq
Re: lpr/lpd problems
daemon@ATHENA.MIT.EDU (irj@btc.uwe.ac.uk)
Tue Feb 28 09:48:38 1995
Date: Tue, 28 Feb 95 12:29:03 GMT
From: irj@btc.uwe.ac.uk
To: bugtraq@fc.net
baba@beckman.uiuc.edu writes...
>
>
> I have heard rumors of security problems associated with the BSD-style
> lpr/lpd printing system. Does anyone know anything about this?
>
Sun systems (4.1.3_U1) patch # 101434-03 lpr Jumbo patch fixes:
lpr checks real rather than effective user
lpr -s -t can be used to remove any file in /
Don't know any more sorry.
Ian
