Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-0164HistoryApr 24, 2009 - 3:30 p.m.
CVE-2009-0164
2009-04-2415:30:00
Debian Security Bug Tracker
security-tracker.debian.org
13
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.01 Low
EPSS
Percentile
83.2%
The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | cups | < 1.3.10-1 | cups_1.3.10-1_all.deb |
| Debian | 11 | all | cups | < 1.3.10-1 | cups_1.3.10-1_all.deb |
| Debian | 10 | all | cups | < 1.3.10-1 | cups_1.3.10-1_all.deb |
| Debian | 999 | all | cups | < 1.3.10-1 | cups_1.3.10-1_all.deb |
| Debian | 13 | all | cups | < 1.3.10-1 | cups_1.3.10-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2009-0164
2009-04-24 00:00:00
cve
cve
CVE-2009-0164
2009-04-24 15:30:00
prion
prion
Design/Logic Flaw
2009-04-24 15:30:00
openvas
openvas
CUPS < 1.3.10 Improper Input Validation Vulnerability
2009-04-30 00:00:00
Fedora Update for cups FEDORA-2010-2743
2010-03-22 00:00:00
Fedora Update for cups FEDORA-2010-2743
2010-03-22 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: cups-1.4.2-7.fc11
2009-12-01 04:19:25
[SECURITY] Fedora 11 Update: cups-1.4.2-26.fc11
2010-03-13 02:30:06
[SECURITY] Fedora 10 Update: cups-1.3.10-1.fc10
2009-04-22 00:50:31
nessus
nessus
Slackware 12.0 / 12.1 / 12.2 / current : cups (SSA:2009-116-01)
2009-04-27 00:00:00
FreeBSD : cups -- remote code execution and DNS rebinding (736e55bc-39bb-11de-a493-001b77d09812)
2009-05-08 00:00:00
CUPS < 1.3.10 Multiple Vulnerabilities
2009-04-17 00:00:00
securityvulns
securityvulns
rPSA-2009-0061-1 cups
2009-04-18 00:00:00
CUPS multipls security vulnerabilities
2009-04-18 00:00:00
About the security content of Security Update 2009-002 / Mac OS X v10.5.7
2009-05-14 00:00:00
slackware
slackware
cups
2009-04-26 15:50:34
freebsd
freebsd
cups -- remote code execution and DNS rebinding
2009-05-05 00:00:00
gentoo
gentoo
CUPS: Multiple vulnerabilities
2009-04-23 00:00:00
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.01 Low
EPSS
Percentile
83.2%
Related for DEBIANCVE:CVE-2009-0164