Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2002-1372
HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-1372

2004-09-0104:00:00
CWE-252
[email protected]
web.nvd.nist.gov
26
cups
denial of service
vulnerability
resource exhaustion
file descriptors

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.5%

JSON

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.

Affected configurations

NVD
Node
applecupsRange1.1.14–1.1.17
Node
applemac_os_xMatch10.2
OR
applemac_os_xMatch10.2.2
Node
debiandebian_linuxMatch2.2
OR
debiandebian_linuxMatch3.0
CPENameOperatorVersion
apple:cupsapple cupsle1.1.17

Related

debiancve 1
cvelist 1
nvd 1
nessus 4
securityvulns 1
debian 4
openvas 4
suse 1
osv 1
debiancve
debiancve
CVE-2002-1372
2004-09-01 04:00:00
cvelist
cvelist
CVE-2002-1372
2004-09-01 04:00:00
nvd
nvd
CVE-2002-1372
2002-12-26 05:00:00
nessus
nessus
CUPS < 1.1.18 Multiple Vulnerabilities
2003-01-18 00:00:00
Mandrake Linux Security Advisory : cups (MDKSA-2003:001)
2004-07-31 00:00:00
Debian DSA-232-1 : cupsys - several vulnerabilities
2004-09-29 00:00:00
securityvulns
securityvulns
iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System &#40;CUPS&#41;
2002-12-20 00:00:00
debian
debian
[SECURITY] [DSA 232-2] New CUPS packages fix wrong libPNG dependency
2003-02-17 14:11:19
[SECURITY] [DSA 232-2] New CUPS packages fix wrong libPNG dependency
2003-02-17 14:11:19
[SECURITY] [DSA 232-1] New CUPS packages fix several vulnerabilities
2003-01-20 15:48:35
openvas
openvas
Debian Security Advisory DSA 232-1 (cupsys)
2008-01-17 00:00:00
Debian Security Advisory DSA 232-2 (cupsys)
2008-01-17 00:00:00
Debian Security Advisory DSA 232-2 (cupsys)
2008-01-17 00:00:00
suse
suse
local and remote privilege escalation in cups
2003-01-02 11:31:40
osv
osv
cupsys - several vulnerabilities
2003-01-20 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.5%

JSON
Related for CVE-2002-1372
debiancve1cvelist1nvd1nessus4securityvulns1debian4openvas4suse1osv1