Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多家厂商lpr远程格式串溢出漏洞
Vulnerability Description
lpr工具用于安排打印任务提交打印任务。 多家厂商基于BSD的lpr工具实现上存在格式化串溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 lpr用到checkremote()函数，后者将用户输入内容组织成一个串，这个串会作为格式化串送往syslog，潜在地存在前段时间所披露的格式化串漏洞。 有问题的代码在lpr/lpd/printjob.c中： if ((s = checkremote())) syslog(LOG_WARNING， s);
CVSS Information
N/A
Vulnerability Type
N/A