lpd / lpr security issues.

Alain De Vos

Alain De Vos

Can someone with knowledge elaborate. I'm one person , one pc, running meany services behind a firewall.
But could i print a very,very,very, bad stuff, which takes over control of my pc ? Because of data in it ?
 
I don't think the vulnerability comes from any code hidden in some printer language, but the demon providing the service, especially on servers and networks is attackable.
 
  • Like
Reactions: mer
Either one is "safe enough" if you deploy it safely.
If the printer is locally attached to the system, put firewall rules in place to block any incoming connection attempts.
That means you can only connect to the printer daemon from localhost.
cups normally opens port 631 as a listening port, so set your firewall rules to only allow connections to 631 from localhost.

If your printer has a WiFi or Bluetooth connection, disable it
 
Cups has security issues. We just don't know them yet.

As far as lpr/lpd is concerned, des@ has not published anything specific, nor can he while most existing FreeBSD installations still run it.
 
I have totally no problems it going from base to ports. Base should be clean.
& then i did ,

Code: 
gs -q -dNOPAUSE -dBATCH -sDEVICE=pxlmono \
   -dDuplex=true -dTumble=false \
   -sOutputFile=output.prn \
   -c "<</Duplex true /Tumble false>> setpagedevice" \
   -f $1


My stupid brother printer liked prn. No idea what format of .prn is. Nor which part is pxlmono...
 
You must log in or register to reply here.
Back
Top