5626 matches found
CVE-2002-1384
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...
CVE-2002-1267
Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."...
CVE-2002-1367
CVE-2002-1367 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17, allowing remote attackers to add printers without authentication via a UDP packet, enabling unauthorized actions such as stealing the local root certificate for the administration server (as demonstrated by new-coke). The Deb...
CVE-2002-1369
jobs.c in Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack...
CVE-2002-1366
CVE-2002-1366 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17. It is due to race conditions related to /etc/cups/certs/ that allow local users with lp privileges to create or overwrite arbitrary files. The issue enables local privilege escalation and potential filesystem manipulation. Pu...
CVE-2002-1267
CVE-2002-1267 : The provided documents describe a vulnerability in Mac OS X 10.2.2 where remote attackers can cause a denial of service by accessing the CUPS Printing Web Administration utility (CUPS Printing Web Administration is Remotely Accessible). The description does not specify the underly...
CVE-2002-1372
CVE-2002-1372 affects the Common Unix Printing System (CUPS) versions 1.1.14–1.1.17. The issue arises because CUPS does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by creating an...
CVE-2002-1384
CVE-2002-1384 affects pdftops in Xpdf 2.01 and earlier, Xpdf-i, and CUPS pre-1.1.18. An integer overflow in a ColorSpace entry with many elements can allow a local attacker to execute arbitrary code (via cups-pdf) on the affected host. Debian OpenVAS advisories (DSA 222-1, 226-1, 232-1/2) and his...
CVE-2002-1369
CVE-2002-1369 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17, where an unsafe use of strncat while processing the options string enables a remote attacker to cause a buffer overflow and execute arbitrary code. OpenVAS and Debian security advisories (DSA-232-1/232-2) corroborate this fam...
CVE-2002-1366
Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...
CVE-2002-1371
filters/image-gif.c in Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif...
cups -- print queue browser denial-of-service
If the CUPS server cupsd receives a zero-length UDP message, it will disable its print queue browser service...
Mandrake Linux Security Advisory : cups (MDKSA-2003:104)
A bug in versions of CUPS prior to 1.1.19 was reported by Paul Mitcheson in the Internet Printing Protocol IPP implementation would result in CUPS going into a busy loop, which could result in a Denial of Service DoS condition. To be able to exploit this problem, an attacker would need to be able...
Mandrake Linux Security Advisory : cups (MDKSA-2003:062)
A Denial of Service DoS vulnerability was discovered in the CUPS printing system by Phil D'Amore of Red Hat. The IPP Internet Printing Protocol that CUPS uses is single-threaded and can only service one request at a time. A malicious user could create a partial request that does not time out and...
Mandrake Linux Security Advisory : cups (MDKSA-2003:001)
iDefense reported several security problems in CUPS that can lead to local and remote root compromise. An integer overflow in the HTTP interface can be used to gain remote access with CUPS privilege. A local file race condition can be used to gain root privilege, although the previous bug must be...
Mandrake Linux Security Advisory : cups (MDKSA-2001:048)
The version of cups shipped with Linux-Mandrake 8.0 has a problem where when a user prints a multi-page PostScript file with embedded pictures, the pages following the first with the picture are all printed on the same page, one on top of the other. From multi-page Abiword files only text only th...
Mandrake Linux Security Advisory : cups (MDKSA-2002:015)
There is a potential buffer overflow vulnerability in CUPS when reading the names of attributes. This bug affects all versions of CUPS and is fixed upstream in version 1.1.14. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...
SUSE-SA:2003:028: cups
The remote host is missing the patch for the advisory SUSE-SA:2003:028 cups. The well known Common Unix Printing System CUPS was found vulnerable to a remote Denial of Service attack. The CUPS daemon will stop serving clients if the second carriage return in a request is not sent to complete the...
SUSE-SA:2003:002: cups
The remote host is missing the patch for the advisory SUSE-SA:2003:002 cups. CUPS is a well known and widely used printing system for unix-like systems. iDFENSE reported several security issues with CUPS that can lead to local and remote root compromise. The following list includes all...
