Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

dvips Arbitrary Command Execution Vulnerability

A vulnerability has been discovered in dvips, which is used as a filter for printing DVI files.

It has been reported that by passing a maliciously constructed file to the lpd daemon, it is possible for an attacker with print access to execute arbitrary commands with escalated privileges.







 

Privacy Statement
Copyright 2008, SecurityFocus