Vulnerability

    Lexmark MarkVision

Affected

    Lexmark MarkVision printer drivers versions below 4.4

Description

    Following  is  based  on  a  Secure Reality Advisories SRADV00007.
    MarkVision is a printer  administration package from Lexmark.   In
    addition  to  software  to  remotely  administer  printers it also
    provides  printer  drivers  for  a  wide  variety  of printers for
    various flavours of Unix.

    Several of  the utilities  that make  up the  Unix printer drivers
    contain command line buffer overflows.  As some of these utilities
    are installed setuid root, a local attacker can trivially  exploit
    the vulnerabilities to execute arbitrary code as root.

    Secure  Reality  successfully  exploited  command  line  overflows
    against the following setuid root programs:

        - /usr/local/lexmark/markvision/bin/cat_network - Heap oveflow
        - /usr/local/lexmark/markvision/bin/cat_parallel - Stack overflow
        - /usr/local/lexmark/markvision/bin/cat_serial - Stack overflow

    They tested  their exploits  on the  Linux version  of the drivers
    under Redhat 6.2.  Obviously  the stack overflows at least  should
    be  exploitable  on  all  the  other  platforms  the  drivers  are
    available for, the heap overflow may not be, they have not  tested
    either case.

Solution

    Please upgrade  to the  latest version  of the  MarkVision drivers
    (4.4) at

        ftp://ftp.lexmark.com/pub/driver/unix/MarkVision/V4.4