OpenBSD lpd Remote File Creation By Trusted Root User Vulnerability
BID:3613
Info
OpenBSD lpd Remote File Creation By Trusted Root User Vulnerability
| Bugtraq ID: | 3613 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 28 2001 12:00AM |
| Updated: | Nov 28 2001 12:00AM |
| Credit: | Discovered by Sebastian Krahmer of SuSE. |
| Vulnerable: |
OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 3.0 |
| Not Vulnerable: | |
Exploit / POC
OpenBSD lpd Remote File Creation By Trusted Root User Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
OpenBSD lpd Remote File Creation By Trusted Root User Vulnerability
Solution:
OpenBSD has released a patch for this vulnerability.
OpenBSD OpenBSD 3.0
OpenBSD OpenBSD 2.8
OpenBSD OpenBSD 2.9
Solution:
OpenBSD has released a patch for this vulnerability.
OpenBSD OpenBSD 3.0
-
OpenBSD 3.0 008_lpd.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/008_lpd.patch
OpenBSD OpenBSD 2.8
-
OpenBSD 2.9 017_lpd.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/017_lpd.patch
OpenBSD OpenBSD 2.9
-
OpenBSD 2.9 017_lpd.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/017_lpd.patch
References
OpenBSD lpd Remote File Creation By Trusted Root User Vulnerability
References:
References:
- OpenBSD 3.2 release errata & patch list (OpenBSD)