Re: Linux /usr/bin/lpc overflow

From: Denis Bucher (dbucherat_private)
Date: Wed Feb 03 1999 - 13:51:15 PST

  • Next message: Philip Stoev: "Re: Unsecured server in applets under Netscape"

    xnecat_private a écrit :
    
    Hello !
    
    I think there is a BIG ERROR in this mail :
    
    > There is a local root comprimise hole in PLP Line Printer Control program,
    > version 4.0.3, which is SuSE 5.2's /usr/bin/lpc.  Most other unices use a
    > different version of lpc (including SuSE 5.1).
    
    Under an installation of SuSE 5.1, I found lpc 4.0.3 !
    Therefore I think 5.1 is not safe !
    
    Denis
    
    --
    
    Denis Bucher,   / infoat_private       Fax: +41-22-8000622 \  Internet Services
    Horus Networks /  http://www.horus.ch Tél. +41-22-8000625  \  Provider
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:32:32 PDT