CVE-2001-1333

Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files...

CVE-2001-0194

CVE-2001-0194: A buffer overflow in the httpGets function of CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line. The vulnerability affects CUPS 1.1.5 and is rated high severity (CVSS vector: Network, No authentication, all confidentiality/integrity/availability...

CVE-2001-0194

Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line...

CVE-2001-0194

Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line...

MDKSA-2001:023 - cups update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: cups Date: February 22nd, 2001 Advisory ID: MDKSA-2001:023 Affected versions: 7.2 Problem Description: A number of problems were found by the SuSE security team recently during an internal audit of...

MDKSA-2001:020 - cups update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: cups Date: February 1st, 2001 Advisory ID: MDKSA-2001:020 Affected versions: 7.2 Problem Description: A problem exists in all versions of CUPS prior to 1.1.5 with the httpGets function. It could go...

MDKSA-2000:070 - cups update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: cups Date: November 16th, 2000 Advisory ID: MDKSA-2000:070 Affected versions: 7.2 Problem Description: A problem existed with previous versions of CUPS that made CUPS printers accessible from...

CVE-2000-0513

CUPS Common Unix Printing System 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password...

CVE-2000-0512

CUPS Common Unix Printing System 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service...

CVE-2000-0511

CVE-2000-0511 concerns CUPS (Common Unix Printing System) 1.04 and earlier, where a remote attacker can cause a denial of service by sending a CGI POST request. The vulnerability affects the CUPS CGI handling path and is described as a remote DoS with no confidentiality or integrity impact, and p...

CVE-2000-0513

CVE-2000-0513 affects CUPS 1.04 and earlier. The vulnerability allows remote DoS when an attacker authenticates with a username that either does not exist or lacks a shadow password. Impact is denial of service (PARTIAL availability). The reports reference a DoS patch (cups-DoS.patch) and public ...

CVE-2000-0510

CUPS Common Unix Printing System 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request...

CVE-2000-0511

CUPS Common Unix Printing System 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request...

CVE-2000-0512

CUPS 1.04 and earlier versions are affected: they do not properly delete request files, allowing a remote attacker to cause a denial of service. Exploitation is network-based and does not require authentication; a patch exists (cups-DoS.patch) and related updates are referenced in the CVE context...

CVE-2000-0510

CUPS 1.04 and earlier are affected by a vulnerability in IPP handling that allows remote attackers to cause a denial of service via a malformed IPP request. The impact is partial availability loss, accessed over the network without authentication. The root cause is improper processing of IPP requ...

CVE-2000-0510

CUPS Common Unix Printing System 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request...

CVE-2000-0511

CUPS Common Unix Printing System 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request...

CVE-2000-0513

CUPS Common Unix Printing System 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password...

CUPS DoS Bugs

A Debian user thanks, Alexander Hvostov! reported a DoS bug in Debian's CUPS packages cupsys. After working with the vendor on the issue, they subsequently discovered a few more. The original bug, at least, is remotely exploitable. The beta versions of CUPS 1.1 are not vulnurable, at least since...

CVE-2000-0512

CUPS Common Unix Printing System 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service...