Sep 26, 2024, 8:27 PMA user on the victim system must print something to a printer that mysteriously appears on the system that has never been there before.
i'm kinda wondering about this part - it makes sense from the vuln description, but on evilsocket's demo it happened automatically, did he actually omit the part where the exploit requires active input from the user? lol
@ptrc
Somebody wanting to make something seem more important than it is will hand-wave over the part that they don't like.
On this evil guy’s write up he mentions print job being sent twice before he shows the video.
“Wait for a print job to be sent to our fake printer for the PPD directives, and therefore the command, to be executed.”
‘Inject the *cupsFilter2 : "application/pdf application/vnd.cups-postscript 0 foomatic-rip line directive to instruct CUPS to execute /usr/lib/cups/filter/foomatic-rip when a print job is sent.’