Attacking UNIX Systems via CUPS, Part I
www.evilsocket.net
Hello friends, this is the first of two, possibly three (if and when I have time to finish the Windows research) writeups. We will start with targeting GNU/Linux systems with an RCE. As someone who’s
  • dingdongitsabear@lemmy.ml
    141·
    2 months ago

    I mean, OK, it’s a vulnerability and there are interesting implications, but this is hardly significant in any pracitcal sense of the word.

    the potential victim has to run their system without a firewall, has to print to the printer they’ve never interacted with before and then the attacker can run shit with whatever the printing system’s user id is, which shouldn’t be an issue on any reasonably modern distro.

    I routinely remove cups and friends from any system I run because I have no need for printing and it bothers me to see it constantly during every system upgrade.

  • JubilantJaguar@lemmy.world
    34·
    2 months ago

    BRB.

    sudo apt purge cups

    Done. This should not even be part of baseline Ubuntu desktop. Speaking for myself but I have not had a printer for about 15 years. The paperless office really did become reality.

    • Dr Jekell@lemmy.worldEnglish
      31·
      2 months ago

      About 25 years for me.

      For most people it’s a better option to use a local print shop for the odd times that they need something printed.

      More options for printing too.