vulnerability bulletin 8803

Solaris: denial of service via lp

Synthesis of the vulnerability

A local attacker can use the lp command to cancel print jobs owned by root.

Severity: 1/4. Creation date: 16/06/2009.

Description of the vulnerability

The lp command is used to print a file. A local attacker can use the lp command to cancel print jobs owned by root. Technical details are unknown.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: Solaris: denial of service via lp. Keywords: Solaris denial service. Identifiers: 247386, 6759604, BID-35400, VIGILANCE-VUL-8803.

Information sources

Publications and announces Source example: Part II - Multiple Printing Regressions in Solaris 10 Kernel Patches 127127-11 and 127128-11

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Computer vulnerability bulletins