Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-1002. PoCs published by zenith parsec.
AI-analyzed exploit summary This exploit leverages a misconfiguration in the DVI printfilter on systems like Red Hat 7.0, allowing remote command execution via crafted DVI directives processed by 'dvips' when invoked by 'lpd'. The PoC demonstrates command injection through a maliciously crafted TeX file.
Description
The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands.
Exploits (1)
This exploit leverages a misconfiguration in the DVI printfilter on systems like Red Hat 7.0, allowing remote command execution via crafted DVI directives processed by 'dvips' when invoked by 'lpd'. The PoC demonstrates command injection through a maliciously crafted TeX file.