SuSE Security Announcement: cups (SuSE-SA:2003:028)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: cups Announcement-ID: SuSE-SA:2003:028 Date: Fri Jun 6 16:00:00 MEST 2003 Affected products: 7.2, 7.3, 8.0, 8.1, 8.2 SuSE Linux Desktop 1.0 SuSE Linux Enterprise Server 8 UnitedLinux 1.0 Vulnerability Type: remote Denial of...

CVE-2003-0195

CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port 631, which does not time out...

CVE-2003-0195

CVE-2003-0195 affects the CUPS print server prior to version 1.1.19. The vulnerability allows remote denial of service via a partial HTTP printing request to the IPP port (631) that does not time out, blocking further printing requests. The issue is triggered by careful crafting of a connection t...

CVE-2003-0195

CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port 631, which does not time out...

CVE-2003-0195: Undefined Security Weakness

CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port 631, which does not time out...

CUPS DoS vulnerability fixed

Upgraded CUPS packages are available for Slackware 8.1, 9.0, and -current to fix a denial of service attack vulnerability. Here are the details from the Slackware 9.0 ChangeLog: Thu May 29 00:52:54 PDT 2003 patches/packages/cups-1.1.19-i386-1.tgz: Upgraded to cups-1.1.19. A denial of service...

[SECURITY] [DSA 232-2] New CUPS packages fix wrong libPNG dependency

-------------------------------------------------------------------------- Debian Security Advisory DSA 232-2 [email protected] http://www.debian.org/security/ Martin Schulze February 20th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 232-2] New CUPS packages fix wrong libPNG dependency

-------------------------------------------------------------------------- Debian Security Advisory DSA 232-2 [email protected] http://www.debian.org/security/ Martin Schulze February 20th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 232-1] New CUPS packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 232-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 232-1] New CUPS packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 232-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2003 http://www.debian.org/security/faq -...

DSA-232 cupsys - several vulnerabilities

Bulletin has no description...

CUPS < 1.1.18 Multiple Vulnerabilities

The remote CUPS server seems vulnerable to various flaws buffer overflow, denial of service, privilege escalation that could allow a remote attacker to shut down this service or remotely gain the privileges of the 'lp' user. C Tenable Network Security, Inc. This script checks for CVE-2002-1368, b...

Important: Red Hat Security Advisory: : Updated CUPS packages fix various vulnerabilities

Updated CUPS packages are available for Red Hat Linux 7.3 and 8.0 which fix various security issues. The Common UNIX Printing System CUPS provides a portable printing layer. A number of vulnerabilities have been discovered in CUPS. CUPS was distributed with Red Hat Linux 7.3 and 8.0 but is not...

CVE-2002-1384

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...

DEBIAN-CVE-2002-1384

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...

CVE-2002-1384

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...

CVE-2002-1368

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing negative arguments to be fed into memcpy calls via HTTP requests with 1 a negative Content-Length value or 2 a negative length in a...

DEBIAN-CVE-2002-1366

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

CVE-2002-1372

Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service resource exhaustion by causing file descriptors to be assigned and not released, as demonstrated...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...