Attacking UNIX Systems via CUPS, Part I

154 · · Sept. 26, 2024, 8:34 p.m.
Summary
Hello friends, this is the first of two, possibly three (if and when I have time to finish the Windows research) writeups. We will start with targeting GNU/Linux systems with an RCE. As someone who’s directly involved in the CUPS project said:From a generic security point of view, a whole Linux system as it is nowadays is just an endless and hopeless mess of security holes waiting to be exploited.Well they’re not wrong!While this is not the first time I try to more or less responsibly report a v...