RHEL 5 : cups (RHSA-2010:0129)

Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating...

Moderate: Red Hat Security Advisory: cups security update

Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating...

PT-2010-1076 · Apple +1 · Cups +4

Name of the Vulnerable Software and Affected Versions: CUPS versions 1.3.7 CUPS-devel versions 1.3.7 cups-lpd versions 1.3.7 cups-libs versions 1.3.7 Description: The issue is related to a use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect functio...

Debian DSA-1933-1 : cups - missing input sanitising

Aaron Siegel discovered that the web interface of cups, the Common UNIX Printing System, is prone to cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1933. The...

Multiple Vendor CUPS Administration Interface CGI Heap Overflow (CVE-2008-0047)

The Common Unix Printing System CUPS is a modular printing system for Unix-like operating systems that allows a computer to act as a print server. A computer running CUPS is a host that can accept print jobs from client computers, process them, and send them to the appropriate printer. A heap...

cups security update

CentOS Errata and Security Advisory CESA-2009:1595 Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 12th January 2010 The packages...

DEBIAN-CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service daemon crash or hang via a client disconnection during listin...

Moderate: Red Hat Security Advisory: cups security update

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 12th January 2010 The packages list in this erratum has been updated to include...

DEBIAN-CVE-2009-2820

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...

cups security update

CentOS Errata and Security Advisory CESA-2009:1513 Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provide...

Apple CUPS PNG Filter Overly Large Image Height Integer Overflow (CVE-2008-5286)

The Common Unix Printing System CUPS is a modular printing system for Unix-like operating systems that allows a computer to act as a print server. A computer running CUPS is a host that can accept print jobs from client computers, process them, and send them to the appropriate printer. There exis...

cups security update

CentOS Errata and Security Advisory CESA-2009:1082 Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX® Printing System CUPS provid...

DEBIAN-CVE-2009-1196

The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service cupsd daemon outage or crash via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."...

CUPS调度程序目录服务远程拒绝服务漏洞

BUGTRAQ ID: 35194 CVECAN ID: CVE-2009-1196 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 用于处理可用打印机和打印机类的CUPS调度程序目录服务例程中存在释放后使用漏洞，远程攻击者可以首先终止然后在一定的时间间隔后向运行cupsd守护程序的机器再发送CUPS浏览报文导致cupsd守护程序停止或崩溃。 Easy Software Products CUPS 1.1.22 厂商补...

RedHat Security Advisory RHSA-2009:1083

The remote host is missing updates announced in advisory RHSA-2009:1083. The Common UNIX® Printing System CUPS provides a portable printing layer for UNIX operating systems. The Internet Printing Protocol IPP allows users to print and manage printing-related tasks over a network. The CUPS pdftops...

CUPS pdftops过滤器多个整数溢出漏洞

BUGTRAQ ID: 35195 CVECAN ID: CVE-2009-0791 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的pdftops过滤器中存在多个可能导致堆溢出的整数溢出漏洞。攻击者可以创建恶意的PDF文件，如果打印了该文件就会导致pdftops崩溃或以运行lp用户的权限执行任意指令。 Easy Software Products CUPS 1.1.22 厂商补丁： Easy Softwar...

CUPS cups/ipp.c空指针引用拒绝服务漏洞

BUGTRAQ ID: 35169 CVECAN ID: CVE-2009-0949 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 在处理包含有两个IPPTAGUNSUPPORTED标签的特质IPP时，CUPS的cups/ipp.c文件中的ippReadIO函数没有正确地初始化ipp结构，这可能导致受影响的应用崩溃。 cups/ipp.c文件中的ippReadIO函数负责初始化表示当前IPP请求中不同标签的ipp结构...

cups: DoS (stop, crash) by renewing CUPS browse packets

The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service cupsd daemon outage or crash via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."...

cups: IPP_TAG_UNSUPPORTED handling NULL pointer dereference DoS

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a scheduler request with two consecutive IPPTAGUNSUPPORTED tags...

CentOS 4 / 5 : cups (CESA-2009:0429)

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIXr Printing System CUPS provides a portable printing layer for UNIX...