CVE-2009-3553

CVE-2009-3553 is a use-after-free vulnerability in CUPS’ cupsdDoSelect path (scheduler/select.c) affecting the CUPS daemon when listing many print jobs. The issue arises from improper reference-count maintenance, allowing a remote attacker to trigger a denial of service (daemon crash or hang) via...

CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service daemon crash or hang via a client disconnection during listin...

CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service daemon crash or hang via a client disconnection during listin...

CUPS文件描述符处理远程拒绝服务漏洞

BUGTRAQ ID: 37048 CVE ID: CVE-2009-3553 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的scheduler/select.c文件中的cupsdDoSelect函数在处理其文件描述符处理接口中引用的方式存在释放后使用错误，远程攻击者可以通过以特殊方式查询特定打印机的当前打印任务列表导致cupsd崩溃。 Easy Software Products CUPS 1.3.7...

CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service daemon crash or hang via a client disconnection during listin...

RHEL 5 : cups (RHSA-2009:1595)

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 12th January 2010 The packages list in this erratum has been updated to include...

cups: Several XSS flaws in forms processed by CUPS web interface

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...

cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service daemon crash or hang via a client disconnection during listin...

Moderate: Red Hat Security Advisory: cups security update

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 12th January 2010 The packages list in this erratum has been updated to include...

cups security update

1:1.3.7-11:.4 - Applied patch to fix CVE-2009-3553 bug 530111, STR 3200. - Applied patch to fix CVE-2009-2820 bug 529833, STR 3367, STR 3401...

CUPS kerberos参数跨站脚本漏洞

BUGTRAQ ID: 36958 CVE ID: CVE-2009-2820 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS没有正确地处理HTTP头和HTML模板，远程攻击者可以通过产品的web界面、打印系统的配置和打印任务的标题提交恶意kerberos参数，执行跨站脚本或HTTP响应拆分攻击。 Easy Software Products CUPS 1.4.x Easy Software Products...

SLES11: Security update for CUPS

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cups cups-client cups-libs More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

Debian Security Advisory DSA 1933-1 (cups)

The remote host is missing an update to cups announced via advisory DSA 1933-1. OpenVAS Vulnerability Test $Id: deb19331.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1933-1 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SLES11: Security update for CUPS

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cups cups-client cups-libs More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

Debian: Security Advisory (DSA-1933-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : cups (cups-6565)

Specially crafted PDF files could cause buffer overflows in the pdftops filter when printing such a document CVE-2009-3608, CVE-2009-3609 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CUPS 'kerberos' Parameter XSS Vulnerability

CUPS is prone to a cross site scripting XSS vulnerability because the application fails to sufficiently sanitize user supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openSUSE Security Update : cups (cups-1506)

The cups web interface was prone to Cross-Site Scripting XSS problems CVE-2009-2820. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cups-1506. The text description of this plugin is C SUSE LL...

SuSE 11 Security Update : CUPS (SAT Patch Number 1504)

The cups web interface was prone to Cross-Site Scripting XSS problems. CVE-2009-2820 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

openSUSE Security Update : cups (cups-1506)

The cups web interface was prone to Cross-Site Scripting XSS problems CVE-2009-2820. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cups-1506. The text description of this plugin is C SUSE LL...