LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Lprng | Astart_technologies | 3.6.3 | 3.6.3 |
Lprng | Astart_technologies | 3.6.5 | 3.6.5 |
Lprng | Astart_technologies | 3.6.13 | 3.6.13 |
Lprng | Astart_technologies | 3.6.8 | 3.6.8 |
Lprng | Astart_technologies | 3.6.2 | 3.6.2 |
Lprng | Astart_technologies | 3.6.10 | 3.6.10 |
Lprng | Astart_technologies | 3.6.15 | 3.6.15 |
Lprng | Astart_technologies | 3.6.6 | 3.6.6 |
Lprng | Astart_technologies | 3.6.14 | 3.6.14 |
Lprng | Astart_technologies | 3.6.9 | 3.6.9 |
Lprng | Astart_technologies | 3.6.1 | 3.6.1 |
Lprng | Astart_technologies | 3.6.4 | 3.6.4 |
Lprng | Astart_technologies | 3.6.12 | 3.6.12 |
Lprng | Astart_technologies | 3.6.7 | 3.6.7 |
Lprng | Astart_technologies | 3.6.11 | 3.6.11 |