Vulnerability Development mailing list archives

Re: lpd exploit?


From: "Larry W. Cashdollar" <lwc () VAPID DHS ORG>
Date: Fri, 1 Dec 2000 11:07:42 -0800

Paranoia is good when it comes to computer security.  And just because you
have never seen it does not mean it does not exist.

The lpd daemon is notorious for being insecure.    A search on
securityfocus.com will show you a few older exploits for it.

I thought redhat 7.0 was using CUPS?

On Thu, 30 Nov 2000, Mark wrote:

This is paranoia.  By default, redhat 7 runs lpd as user 'lp', and I have
never seen any exploits for this daemon.

mark
tort () dethbystereo com


On Thu, 30 Nov 2000 root () MICROSOFT COM wrote:

Not sure if this is true or not, but I thought I'd give a heads-up...



Current thread: