Lucene search

[email protected]NVD:CVE-2009-0164

HistoryApr 24, 2009 - 3:30 p.m.

CVE-2009-0164

2009-04-2415:30:00

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

7.4

Confidence

High

EPSS

0.01

Percentile

83.5%

JSON

The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.

Affected configurations

Nvd

Node

applecupsRange≤1.3.9

applecupsMatch1.1

applecupsMatch1.1.1

applecupsMatch1.1.2

applecupsMatch1.1.3

applecupsMatch1.1.4

applecupsMatch1.1.5

applecupsMatch1.1.5-1

applecupsMatch1.1.5-2

applecupsMatch1.1.6

applecupsMatch1.1.6-1

applecupsMatch1.1.6-2

applecupsMatch1.1.6-3

applecupsMatch1.1.7

applecupsMatch1.1.8

applecupsMatch1.1.9

applecupsMatch1.1.9-1

applecupsMatch1.1.10

applecupsMatch1.1.10-1

applecupsMatch1.1.11

applecupsMatch1.1.12

applecupsMatch1.1.13

applecupsMatch1.1.14

applecupsMatch1.1.15

applecupsMatch1.1.16

applecupsMatch1.1.17

applecupsMatch1.1.18

applecupsMatch1.1.19

applecupsMatch1.1.19rc1

applecupsMatch1.1.19rc2

applecupsMatch1.1.19rc3

applecupsMatch1.1.19rc4

applecupsMatch1.1.19rc5

applecupsMatch1.1.20

applecupsMatch1.1.20rc1

applecupsMatch1.1.20rc2

applecupsMatch1.1.20rc3

applecupsMatch1.1.20rc4

applecupsMatch1.1.20rc5

applecupsMatch1.1.20rc6

applecupsMatch1.1.21

applecupsMatch1.1.21rc1

applecupsMatch1.1.21rc2

applecupsMatch1.1.22

applecupsMatch1.1.22rc1

applecupsMatch1.1.22rc2

applecupsMatch1.1.23

applecupsMatch1.1.23rc1

applecupsMatch1.2b1

applecupsMatch1.2b2

applecupsMatch1.2rc1

applecupsMatch1.2rc2

applecupsMatch1.2rc3

applecupsMatch1.2.0

applecupsMatch1.2.1

applecupsMatch1.2.2

applecupsMatch1.2.3

applecupsMatch1.2.4

applecupsMatch1.2.5

applecupsMatch1.2.6

applecupsMatch1.2.7

applecupsMatch1.2.8

applecupsMatch1.2.9

applecupsMatch1.2.10

applecupsMatch1.2.11

applecupsMatch1.2.12

applecupsMatch1.3b1

applecupsMatch1.3rc1

applecupsMatch1.3rc2

applecupsMatch1.3.0

applecupsMatch1.3.1

applecupsMatch1.3.2

applecupsMatch1.3.3

applecupsMatch1.3.4

applecupsMatch1.3.5

applecupsMatch1.3.6

applecupsMatch1.3.7

applecupsMatch1.3.8

VendorProductVersionCPE
applecups*cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*
applecups1.1cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*
applecups1.1.1cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*
applecups1.1.2cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*
applecups1.1.3cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*
applecups1.1.4cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*
applecups1.1.5cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*
applecups1.1.5-1cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*
applecups1.1.5-2cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*
applecups1.1.6cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	cups	*	cpe:2.3:a:apple:cups::::::::
apple	cups	1.1	cpe:2.3:a:apple:cups:1.1:::::::*
apple	cups	1.1.1	cpe:2.3:a:apple:cups:1.1.1:::::::*
apple	cups	1.1.2	cpe:2.3:a:apple:cups:1.1.2:::::::*
apple	cups	1.1.3	cpe:2.3:a:apple:cups:1.1.3:::::::*
apple	cups	1.1.4	cpe:2.3:a:apple:cups:1.1.4:::::::*
apple	cups	1.1.5	cpe:2.3:a:apple:cups:1.1.5:::::::*
apple	cups	1.1.5-1	cpe:2.3:a:apple:cups:1.1.5-1:::::::*
apple	cups	1.1.5-2	cpe:2.3:a:apple:cups:1.1.5-2:::::::*
apple	cups	1.1.6	cpe:2.3:a:apple:cups:1.1.6:::::::*