exploits , vulnerabilities , articles , Remote Linux Groff Exploitation Via LPD Vulnerability

Title	Remote Linux Groff Exploitation Via LPD Vulnerability
Published	2001-07-26-12:00AM
Updated	2002-10-19-10:58PM
Class	Input Validation Error
CVE	CVE-2001-1022
Remote	Yes
Local	No
Credit	Discovered by Zenith Parsec <zen-parse@gmx.net>.
Vulnerable	NetBSD NetBSD 1.6 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5 jgroff jgroff 1.15 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 IA32 Debian Linux 2.2 powerpc Debian Linux 2.2 sparc GNU groff 1.16 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Single Network Firewall 7.2 RedHat Linux 7.0 RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.2 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 GNU groff 1.15 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 powerpc Debian Linux 2.2 sparc GNU groff 1.14 GNU groff 1.11 a RedHat Linux 5.2 i386 GNU groff 1.11 GNU groff 1.10
Not Vulnerable	GNU groff 1.18
Code	Zenith Parsec made the following exploit code available: /data/vulnerabilities/exploits/pic-lpr-remote.c
TXT