[SECURITY] Fedora 28 Update: cups-2.2.6-30.fc28

CUPS printing system provides a portable printing layer for UNIX=EF=BF=BD=EF=BF=BD operating systems. It has been developed by Apple In c. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Fedora Update for cups FEDORA-2018-1d9aa4a5fd

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for cups (openSUSE-SU-2018:4141-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for cups (openSUSE-SU-2018:4141-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : cups (openSUSE-2018-1555)

This update for cups fixes the following security issue : - CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface bsc1115750. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 ...

Security update for cups (important)

This update for cups fixes the following security issue: - CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface bsc1115750. This update was imported from the SUSE:SLE-12:Update update project...

Security update for cups (important)

This update for cups fixes the following issues: Security issue fixed: - CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface bsc1115750. This update was imported from the SUSE:SLE-15:Update update project...

SUSE SLED12 / SLES12 Security Update : cups (SUSE-SU-2018:4089-1)

This update for cups fixes the following issues : Security issue fixed : CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface bsc1115750. Note that Tenable Network Security has extracted the preceding description...

openSUSE Security Update : cups (openSUSE-2018-1539)

This update for cups fixes the following issues : Security issue fixed : - CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface bsc1115750. This update was imported from the SUSE:SLE-15:Update update project...

openSUSE: Security Advisory for cups (openSUSE-SU-2018:4105-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2018:4089-1 Security update for cups

This update for cups fixes the following issues: Security issue fixed: - CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface bsc1115750...

[SECURITY] Fedora 29 Update: cups-2.2.8-7.fc29

CUPS printing system provides a portable printing layer for UNIX=EF=BF=BD=EF=BF=BD operating systems. It has been developed by Apple In c. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Authentication Bypass

libcups.so is vulnerable to authentication bypass. The CUPS web interface uses an insecure function and seed to generate the session cookie, which results in a predictable token that can be guessed easily by a remote attacker to gain access to the application...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : CUPS vulnerability (USN-3842-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3842-1 advisory. Jann Horn discovered that CUPS incorrectly handled session cookie randomness. A remote attacker could possibly use this issue to perform...

Ubuntu: Security Advisory (USN-3842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3842-1: CUPS vulnerability

Jann Horn discovered that CUPS incorrectly handled session cookie randomness. A remote attacker could possibly use this issue to perform cross-site request forgery CSRF attacks...

SUSE-SU-2018:4059-1 Security update for cups

This update for cups fixes the following issues: Security issue fixed: - CVE-2018-4700: Fixed extremely predictable cookie generation that is effectively breaking the CSRF protection of the CUPS web interface bsc1115750...

PT-2018-3598

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 2.2.10 Description The issue is related to the CUPS web interface, where the session cookie is easily guessable on Linux systems, allowing unauthorized scripted access when the web interface is enabled. This is due to a...

PT-2018-2935

Name of the Vulnerable Software and Affected Versions cups-ppdc affected versions not specified Description The issue is related to buffer overflow errors in the ppdpo utility from the cups-ppdc package. Exploitation of this issue could allow an attacker to cause a denial of service using a...

PT-2018-2933

Name of the Vulnerable Software and Affected Versions cups-ppdc affected versions not specified Description The issue is related to buffer overflow errors in the ppdhtml utility. Exploitation of this issue could allow an attacker to cause a denial of service using a specially crafted script...