BID:3561

HP-UX Remote Line Printer Daemon Logic Flaw Vulnerability

Info

HP-UX Remote Line Printer Daemon Logic Flaw Vulnerability

Bugtraq ID:	3561
Class:	Boundary Condition Error
CVE:	CVE-2001-0817 CVE-2001-0817
Remote:	Yes
Local:	No
Published:	Nov 20 2001 12:00AM
Updated:	Mar 19 2014 12:35AM
Credit:	This vulnerability was published in an Internet Security Systems Security Advisory on November 20th, 2001.
Vulnerable:	HP HP-UX 11.11 HP HP-UX 11.0 HP HP-UX 10.20 HP HP-UX 10.10 HP HP-UX 10.0 1

Not Vulnerable:

Discussion

HP-UX Remote Line Printer Daemon Logic Flaw Vulnerability

Rlpdaemon is the line printer daemon that ships with HP-UX. It is intended to provide print-sharing capabilities over a network. It is installed by default on HP-UX systems and runs as superuser. Rlpdaemon is based on the original BSD Unix line printer daemon and is similar to the lpd incorporated into other Unix variants.

The HP-UX line printer daemon is prone to an issue which may allow a remote attacker to gain local access to a host running the vulnerable package.

This vulnerability may allow a remote attacker to make a specially crafted print request which is able to write to arbitrary files or create directories on the host.

This may result in the remote attacker gaining local access, potentially with elevated privileges.