[ Hackerslab bug_paper ] Linux printtool get printer password
Date: Thu, 9 Mar 2000 04:43:43 +0900
From: Sheshep ankh Dubhe <dubhe@DUAT.DHS.ORG>
To: BUGTRAQ@SECURITYFOCUS.COM
Subject: [ Hackerslab bug_paper ] Linux printtool get printer password
[ Hackerslab bug_paper ] Linux printtool get printer password
File : /usr/bin/printtool
SYSTEM : Linux
INFO :
If make printer configuration by printtool package, It make vule config file.
Config file perrmission is "-rw-r--r-- root root".
If use samba network printer, password stored in config file.
Tested platform : RedHat 6.1 - 6.2B
printtool-3.41-2
printtool-3.42-3ac
printtool-3.43-1
[dubhe@duat dubhe]$ ls -lsa /var/spool/lpd/lp/.config
1 -rw-r--r-- 1 root root 96 Mar 6 13:21 /var/spool/lpd/lp/.config
[dubhe@duat dubhe]$ cat /var/spool/lpd/lp/.config
share='\\xxxxx\HP'
hostip=xxx.xxx.xxx.xxx
user='username'
password='1111'
workgroup='xxxxxxxx'
Now to fix
------------
chmod o-r /var/spool/lpd/lp/.config
chgrp lp /var/spool/lpd/lp/.config
- Kyong-won, Cho -
e-mail : dubhe@hackerslab.org dubhe@duat.dhs.org
