CVE-2002-1366

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

CVE-2002-1371

filters/image-gif.c in Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif...

CVE-2002-1384: Undefined Security Weakness

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...

CVE-2002-1369: Undefined Security Weakness

jobs.c in Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack...

CVE-2002-1367: Undefined Security Weakness

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

CVE-2002-1366: Undefined Security Weakness

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

CVE-2002-1267: Undefined Security Weakness

Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."...

CVE-2002-1371: Undefined Security Weakness

filters/image-gif.c in Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif...

CVE-2002-1372: Unchecked Return Value

Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service resource exhaustion by causing file descriptors to be assigned and not released, as demonstrated...

cups -- print queue browser denial-of-service

If the CUPS server cupsd receives a zero-length UDP message, it will disable its print queue browser service...

Mandrake Linux Security Advisory : cups (MDKSA-2003:104)

A bug in versions of CUPS prior to 1.1.19 was reported by Paul Mitcheson in the Internet Printing Protocol IPP implementation would result in CUPS going into a busy loop, which could result in a Denial of Service DoS condition. To be able to exploit this problem, an attacker would need to be able...

Mandrake Linux Security Advisory : cups (MDKSA-2002:015)

There is a potential buffer overflow vulnerability in CUPS when reading the names of attributes. This bug affects all versions of CUPS and is fixed upstream in version 1.1.14. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Mandrake Linux Security Advisory : cups (MDKSA-2001:048)

The version of cups shipped with Linux-Mandrake 8.0 has a problem where when a user prints a multi-page PostScript file with embedded pictures, the pages following the first with the picture are all printed on the same page, one on top of the other. From multi-page Abiword files only text only th...

Mandrake Linux Security Advisory : cups (MDKSA-2003:001)

iDefense reported several security problems in CUPS that can lead to local and remote root compromise. An integer overflow in the HTTP interface can be used to gain remote access with CUPS privilege. A local file race condition can be used to gain root privilege, although the previous bug must be...

Mandrake Linux Security Advisory : cups (MDKSA-2003:062)

A Denial of Service DoS vulnerability was discovered in the CUPS printing system by Phil D'Amore of Red Hat. The IPP Internet Printing Protocol that CUPS uses is single-threaded and can only service one request at a time. A malicious user could create a partial request that does not time out and...

SUSE-SA:2003:028: cups

The remote host is missing the patch for the advisory SUSE-SA:2003:028 cups. The well known Common Unix Printing System CUPS was found vulnerable to a remote Denial of Service attack. The CUPS daemon will stop serving clients if the second carriage return in a request is not sent to complete the...

SUSE-SA:2003:002: cups

The remote host is missing the patch for the advisory SUSE-SA:2003:002 cups. CUPS is a well known and widely used printing system for unix-like systems. iDFENSE reported several security issues with CUPS that can lead to local and remote root compromise. The following list includes all...

CVE-2004-0382

Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting...

CVE-2004-0382

Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting...

CVE-2004-0382

Technical details are not publicly available in the provided documents for CVE-2004-0382. Monitor for updates; the entries show unknown impact and lack concrete root cause/exploit information.