Security hole in Flex/IP

Article View: comp.os.netware.misc

Article #605

Back to comp.os.netware.misc Previous Next

#605

From: A. Grant
Date: Thu, 03 Aug 1995 00:00

15 lines
1349 bytes

There appears to be a security hole in Unix-to-NetWare printing
with Flex/IP.  The problem is that Flex/IP's LPD server fails to
check whether the sender is using a reserved port.  So, if you
are printing from, say, a Unix timesharing system that you have
set up to Flex/IP as a trusted host, unprivileged users on that
system can set up connections to Flex/IP and send whatever they
like, in particular they can pretend to be other users (Flex/IP
does not do any ident() checking either).

This allows users to bypass any queue protection and printer
accounting on the Novell server.

I would recommend only making 'trusted hosts' those hosts which
are entirely trusted and not simply those whose reserved ports 
are trusted as you would do when setting up a normal LPD server.

Technical Details

Message-ID: <ag129.2211.000B87B2@cam.ac.uk>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fe659,ebf3a20b665a4594,start
X-Google-Attributes: gidfe659,public
X-Google-Thread: f8bf7,ebf3a20b665a4594,start
X-Google-Attributes: gidf8bf7,public
X-Google-Thread: 103bf6,ebf3a20b665a4594,start
X-Google-Attributes: gid103bf6,public
From: ag129@cam.ac.uk (A. Grant)
Subject: Security hole in Flex/IP
Date: 1995/08/03
Message-ID: <ag129.2211.000B87B2@cam.ac.uk>
X-Deja-AN: 107434531
organization: Systems
newsgroups: comp.os.netware.misc,comp.os.netware.security,bit.listserv.novell