Scientific Linux Security Update : cups on SL5.x, SL4.x, SL3.x i386/x86_64

Maurycy Prodeus discovered an integer overflow flaw in the way CUPS processes PDF files. An attacker could create a malicious PDF file that could potentially execute arbitrary code when printed. CVE-2007-3387 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientifi...

Scientific Linux Security Update : cups on SL3.x i386/x86_64

The previous CUPS security advisor, stated that it fixed CVE-2008-3640 for Scientific Linux 3, 4, and 5. It was discovered this flaw was not properly fixed on Scientific Linux 3, however. CVE-2009-0577 These new packages contain a proper fix for CVE-2008-3640 on Scientific Linux 3. Scientific Lin...

Scientific Linux Security Update : cups on SL4.x, SL5.x i386/x86_64

Multiple integer overflow flaws were found in the CUPS JBIG2 decoder. An attacker could create a malicious PDF file that would cause CUPS to crash or, potentially, execute arbitrary code as the 'lp' user if the file was printed. CVE-2009-0147, CVE-2009-1179 Multiple buffer overflow flaws were fou...

Scientific Linux Security Update : cups on SL3.x, SL5.x i386/x86_64

A NULL pointer dereference flaw was found in the way CUPS handled subscriptions for printing job completion notifications. A local user could use this flaw to crash the CUPS daemon by submitting a large number of printing jobs requiring mail notification on completion, leading to a denial of...

Scientific Linux Security Update : cups on SL3.x, SL4.x, SL5.x i386/x86_64

A buffer overflow flaw was discovered in the SGI image format decoding routines used by the CUPS image converting filter 'imagetops'. An attacker could create a malicious SGI image file that could, possibly, execute arbitrary code as the 'lp' user if the file was printed. CVE-2008-3639 An integer...

Scientific Linux Security Update : cups on SL5.x i386/x86_64

A flaw was found in the way CUPS handles certain Internet Printing Protocol IPP tags. A remote attacker who is able to connect to the IPP TCP port could send a malicious request causing the CUPS daemon to crash, or potentially execute arbitrary code. Please note that the default CUPS configuratio...

Scientific Linux Security Update : cups on SL3.x, SL4.x, SL5.x i386/x86_64

A NULL pointer dereference flaw was found in the CUPS IPP routine, used for processing incoming IPP requests for the CUPS scheduler. An attacker could use this flaw to send specially crafted IPP requests that would crash the cupsd daemon. CVE-2009-0949 A use-after-free flaw was found in the CUPS...

Scientific Linux Security Update : cups on SL5.x i386/x86_64 (20120221)

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. A heap-based buffer overflow flaw was found in the Lempel-Ziv-Welch LZW decompression algorithm implementation used by the CUPS GIF image format reader. An attacker could create...

Scientific Linux Security Update : cups on SL6.x i386/x86_64

The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating systems. A heap-based buffer overflow flaw was found in the Lempel-Ziv-Welch LZW decompression algorithm implementation used by the CUPS GIF image format reader. An attacker could create a malicious GIF ima...

Scientific Linux Security Update : cups on SL3.x, SL4.x, SL5.x i386/x86_64

SL 3 and SL 4 only A flaw was found in the way CUPS handled the addition and removal of remote shared printers via IPP. A remote attacker could send malicious UDP IPP packets causing the CUPS daemon to attempt to dereference already freed memory and crash. CVE-2008-0597 A memory management flaw w...

Scientific Linux Security Update : cups on SL3.x, SL4.x, SL5.x i386/x86_64

A missing memory allocation failure check flaw, leading to a NULL pointer dereference, was found in the CUPS 'texttops' filter. An attacker could create a malicious text file that would cause 'texttops' to crash or, potentially, execute arbitrary code as the 'lp' user if the file was printed...

Scientific Linux Security Update : cups on SL3.x, SL4.x, SL5.x i386/x86_64

SL5 Only: A heap buffer overflow flaw was found in a CUPS administration interface CGI script. A local attacker able to connect to the IPP port TCP port 631 could send a malicious request causing the script to crash or, potentially, execute arbitrary code as the 'lp' user. Please note: the defaul...

Scientific Linux Security Update : cups on SL5.x i386/x86_64

CVE-2010-0302 cups Incomplete fix for CVE-2009-3553 It was discovered that the cups 1.3.7-11.el54.4 security update did not fully correct the use-after-free flaw in the way CUPS handled references in its file descriptors-handling interface. A remote attacker could send specially crafted queries t...

Scientific Linux Security Update : cups on SL3.x i386/x86_64

An integer overflow flaw, leading to a heap-based buffer overflow, was discovered in the Tagged Image File Format TIFF decoding routines used by the CUPS image-converting filters, 'imagetops' and 'imagetoraster'. An attacker could create a malicious TIFF file that could, potentially, execute...

Scientific Linux Security Update : cups on SL5.x i386/x86_64

Two integer overflow flaws were found in the CUPS 'pdftops' filter. An attacker could create a malicious PDF file that would cause 'pdftops' to crash or, potentially, execute arbitrary code as the 'lp' user if the file was printed. CVE-2009-3608, CVE-2009-3609 After installing the update, the cup...

Scientific Linux Security Update : cups on SL4.x i386/x86_64

Problem description : Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause CUPS to crash or potentially execute arbitrary code when printed. CVE-2007-4352, CVE-2007-5392, CVE-2007-5393 Alin Rad Pop discovered a flaw in ...

GLSA-201207-10 : CUPS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201207-10 CUPS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to execute arbitrary code using...

RedHat Update for cups RHSA-2011:1635-03

Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2011:1635-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CUPS: Multiple vulnerabilities

Background CUPS, the Common Unix Printing System, is a full-featured print server. Description Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to execute arbitrary code using specially...

RedHat Update for cups RHSA-2011:1635-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...