|
Hidden CUPS Web Frontend
If you're using Mac OS X, try this link:
http://localhost:631
While this printer admin software looks nice (it's cupsd), it's evil that:
- It's on by default
- That it's running a low-numbered port, and thus is running as
root
The only upside is that it seems to refuse connections not from localhost. Still, smells to me like it's ripe for a buffer overflow attack.
Hat tip to Waldemar for alerting me to this "feature"
Wednesday, February 26, 2003
12:00 AM
|
