Bugtraq mailing list archives

Re: [ Hackerslab bug_paper ] Linux printtool get printer passwor


From: bknotts () SLAPPY ORG (Brian Knotts)
Date: Mon, 13 Mar 2000 11:28:50 -0800


On 08-Mar-2000 Sheshep ankh Dubhe wrote:
[ Hackerslab bug_paper ] Linux printtool get printer password

File : /usr/bin/printtool

SYSTEM : Linux

INFO :

If make printer configuration by printtool package, It make vule config file.
Config file perrmission is "-rw-r--r-- root root".
If use samba network printer, password stored in config file.

Tested platform : RedHat 6.1 - 6.2B
printtool-3.41-2
printtool-3.42-3ac
printtool-3.43-1

I fixed my /usr/bin/printtool (v. 3.41) with:

2302a2303,2307
#
#   set the .config permissions to something sane
#
    catch {exec chown root.lp $smb_config}
    catch {exec chmod 600 $smb_config}
2465a2471,2475
#
#   set the .config permissions to something sane
#
    catch {exec chown root.lp $ncp_config}
    catch {exec chmod 600 $ncp_config}

Seems to work.

--
--------------------------------------------------------------------------------
Brian Knotts                                                  bknotts () slappy org



Current thread: