{"modified": "2008-09-05T16:35:15", "id": "CVE-2003-0788", "edition": 1, "objectVersion": "1.2", "cvss": {"score": 5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2003-0788", "cvelist": ["CVE-2003-0788"], "references": ["http://www.turbolinux.com/security/TLSA-2003-63.txt", "http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000788", "http://www.redhat.com/support/errata/RHSA-2003-275.html", "http://www.securityfocus.com/bid/8952", "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:104", "http://xforce.iss.net/xforce/xfdb/13584", "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000779", "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=97958"], "bulletinFamily": "NVD", "cpe": ["cpe:/a:easy_software_products:cups:1.1.6", "cpe:/a:easy_software_products:cups:1.1.18", "cpe:/a:easy_software_products:cups:1.1.14", "cpe:/a:easy_software_products:cups:1.1.4", "cpe:/a:easy_software_products:cups:1.1.1", "cpe:/a:easy_software_products:cups:1.0.4", "cpe:/a:easy_software_products:cups:1.1.7", "cpe:/a:easy_software_products:cups:1.1.16", "cpe:/a:easy_software_products:cups:1.1.12", "cpe:/a:easy_software_products:cups:1.1.17", "cpe:/a:easy_software_products:cups:1.0.4_8", "cpe:/a:easy_software_products:cups:1.1.4_5", "cpe:/a:easy_software_products:cups:1.1.10", "cpe:/a:easy_software_products:cups:1.1.4_3", "cpe:/a:easy_software_products:cups:1.1.15", "cpe:/a:easy_software_products:cups:1.1.4_2", "cpe:/a:easy_software_products:cups:1.1.13"], "title": "CVE-2003-0788", "published": "2003-12-01T00:00:00", "viewCount": 0, "type": "cve", "lastseen": "2016-09-03T04:04:12", "description": "Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service (CPU consumption from a \"busy loop\") via certain inputs to the IPP port (TCP 631).", "hash": "034ae6a50bba897c3dd453e3ad4e8b7d358f660b4ffc539975dbe9eb14d39059", "reporter": "NVD", "scanner": [], "assessment": {"system": "", "name": "", "href": ""}, "enchantments": {"vulnersScore": 6.1}}

{"result": {"nessus": [{"id": "MANDRAKE_MDKSA-2003-104.NASL", "type": "nessus", "title": "Mandrake Linux Security Advisory : cups (MDKSA-2003:104)", "description": "A bug in versions of CUPS prior to 1.1.19 was reported by Paul Mitcheson in the Internet Printing Protocol (IPP) implementation would result in CUPS going into a busy loop, which could result in a Denial of Service (DoS) condition. To be able to exploit this problem, an attacker would need to be able to make a TCP connection to the IPP port (port 631 by default).\n\nThe provided packages have been patched to correct this problem.", "published": "2004-07-31T00:00:00", "cvss": {"score": 5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=14086", "cvelist": ["CVE-2003-0788"], "lastseen": "2016-09-26T17:24:13"}], "osvdb": [{"id": "OSVDB:2761", "type": "osvdb", "title": "CUPS Unspecified DoS ", "description": "## Vulnerability Description\nCUPS V1.1.19 contains a flaw that may allow a local denial of service. The issue is triggered when a malicious user connects to TCP port 631 (IPP) and cause IPP to enter into an infinite loop.\n## Technical Description\nCUPS (Common Unix Printing System) is a Unix print spooler.\n## Solution Description\nUpgrade to version 1.2 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): Restrict access to ensure that only trusted users can access the service.\n\n\n## Short Description\nCUPS V1.1.19 contains a flaw that may allow a local denial of service. The issue is triggered when a malicious user connects to TCP port 631 (IPP) and cause IPP to enter into an infinite loop.\n## References:\nVendor URL: http://www.cups.org/\n[Secunia Advisory ID:10123](https://secuniaresearch.flexerasoftware.com/advisories/10123/)\nISS X-Force ID: 13584\n[CVE-2003-0788](https://vulners.com/cve/CVE-2003-0788)\n", "published": "2003-11-03T08:59:16", "cvss": {"score": 5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:2761", "cvelist": ["CVE-2003-0788"], "lastseen": "2017-04-28T13:19:57"}]}}