Test ID:	1.3.6.1.4.1.25623.1.0.11023
Category:	Gain root remotely
Title:	lpd, dvips and remote command execution
Summary:	NOSUMMARY
Description:	Description: The remote lpd server calls dvips in insecure mode. An attacker may use this flaw to execute arbitrary commands remotely on this host. Solution : edit the file /usr/lib/rhs/rhs-printfilters/dvi-to-ps.fpi and change the linethat specifies how 'dvips' is to be executed from : dvips -f $DVIPS_OPTIONS < $TMP_FILE to dvips -R -f $DVIPS_OPTIONS < $TMP_FILE Risk factor : High
Cross-Ref:	BugTraq ID: 3241 Common Vulnerability Exposure (CVE) ID: CVE-2001-1002 http://www.securityfocus.com/bid/3241 Bugtraq: 20010827 LPRng/rhs-printfilters - remote execution of commands (Google Search) http://marc.info/?l=bugtraq&m=99892644616749&w=2 http://www.redhat.com/support/errata/RHSA-2001-102.html XForce ISS Database: dvips-lpd-command-execution(16509) https://exchange.xforce.ibmcloud.com/vulnerabilities/16509
Copyright	This script is Copyright (C) 2002 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.