Description
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.
Affected products
- astart_technologies / lprng3.6.1 – 3.6.1
- astart_technologies / lprng3.6.2 – 3.6.2
- astart_technologies / lprng3.6.3 – 3.6.3
- astart_technologies / lprng3.6.4 – 3.6.4
- astart_technologies / lprng3.6.5 – 3.6.5
- astart_technologies / lprng3.6.6 – 3.6.6
- astart_technologies / lprng3.6.7 – 3.6.7
- astart_technologies / lprng3.6.8 – 3.6.8
- astart_technologies / lprng3.6.9 – 3.6.9
- astart_technologies / lprng3.6.10 – 3.6.10
- astart_technologies / lprng3.6.11 – 3.6.11
- astart_technologies / lprng3.6.12 – 3.6.12
- astart_technologies / lprng3.6.13 – 3.6.13
- astart_technologies / lprng3.6.14 – 3.6.14
- astart_technologies / lprng3.6.15 – 3.6.15