5626 matches found
UBUNTU-CVE-2015-2265
The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...
[SECURITY] [DSA 3172-1] cups security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3172-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 25, 2015 http://www.debian.org/security/faq -...
CUPS integer overflow
Integer overflow on compressed raster files parsing...
cups: world-readable permissions
It was discovered that CUPS allowed certain users to create symbolic links in certain directories under /var/cache/cups/. A local user with the 'lp' group privileges could use this flaw to read the contents of arbitrary files on the system or, potentially, escalate their privileges on the system...
Moderate: Red Hat Bug Fix Advisory: cups bug fix and enhancement update
Updated cups packages that fix several bugs and add one enhancement are now available for Red Hat Enterprise Linux 7. CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. This update fixes the following bugs: When using the cupsEnumDests API call, the libcups...
cups: Incomplete fix for CVE-2014-3537
It was discovered that CUPS allowed certain users to create symbolic links in certain directories under /var/cache/cups/. A local user with the 'lp' group privileges could use this flaw to read the contents of arbitrary files on the system or, potentially, escalate their privileges on the system...
cups: insufficient checking leads to privilege escalation
It was discovered that CUPS allowed certain users to create symbolic links in certain directories under /var/cache/cups/. A local user with the 'lp' group privileges could use this flaw to read the contents of arbitrary files on the system or, potentially, escalate their privileges on the system...
cups: cross-site scripting flaw fixed in the 1.7.2 release
A cross-site scripting XSS flaw was found in the CUPS web interface. An attacker could use this flaw to perform a cross-site scripting attack against users of the CUPS web interface...
[SECURITY] [DLA 159-1] cups security update
Package : cups Version : 1.4.4-7+squeeze7 CVE ID : CVE-2014-9679 Debian Bug : 778387 Peter De Wachter discovered that CUPS, the Common UNIX Printing System, did not correctly parse compressed raster files. By submitting a specially crafted raster file, a remote attacker could use this vulnerabili...
Ubuntu 14.04 LTS : CUPS vulnerability (USN-2520-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2520-1 advisory. Peter De Wachter discovered that CUPS incorrectly handled certain malformed compressed raster files. A remote attacker could use this issue to cause CUPS to crash...
Ubuntu: Security Advisory (USN-2520-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : cups (openSUSE-2015-182)
cups was updated to fix one security issue. This security issue was fixed : - CVE-2014-9679: A malformed compressed raster file can trigger a buffer overflow in cupsRasterReadPixels bnc917799. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
DLA-159-1 cups - security update
Bulletin has no description...
USN-2520-1: CUPS vulnerability
Peter De Wachter discovered that CUPS incorrectly handled certain malformed compressed raster files. A remote attacker could use this issue to cause CUPS to crash, resulting in a denial of service, or possibly execute arbitrary code...
USN-2520-1 cups vulnerability
Peter De Wachter discovered that CUPS incorrectly handled certain malformed compressed raster files. A remote attacker could use this issue to cause CUPS to crash, resulting in a denial of service, or possibly execute arbitrary code...
Debian DSA-3172-1 : cups - security update
Peter De Wachter discovered that CUPS, the Common UNIX Printing System, did not correctly parse compressed raster files. By submitting a specially crafted raster file, a remote attacker could use this vulnerability to trigger a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
[SECURITY] [DSA 3172-1] cups security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3172-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 25, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3172-1] cups security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3172-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 25, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3172-1 (cups - security update)
Peter De Wachter discovered that CUPS, the Common UNIX Printing System, did not correctly parse compressed raster files. By submitting a specially crafted raster file, a remote attacker could use this vulnerability to trigger a buffer overflow. OpenVAS Vulnerability Test $Id: deb3172.nasl 6609...