CUPS CGI接口远程堆溢出漏洞

BUGTRAQ ID: 28307 CVECAN ID: CVE-2008-0047 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的CGI接口处理畸形的用户请求时存在堆缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 CUPS在TCP 631端口上监听请求，这个接口允许访问一些用于管理CUPS和提供打印任务信息的CGI应用。如果远程攻击者向这个端口提交了恶意请求的话，就可能触发堆溢出，导致执行任意指令。...

Design/Logic Flaw

The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF file, which makes it easier for attackers to decrypt the file via brute force methods...

DEBIAN-CVE-2008-0047

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions...

CVE-2008-0995

The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF file, which makes it easier for attackers to decrypt the file via brute force methods...

CVE-2008-0996

The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials...

Design/Logic Flaw

The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials...

CVE-2008-0995

CVE-2008-0995 : The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF, enabling brute-force decryption. Access to the printed/encrypted file can allow this. Vendor has released security updates (SecUpd2008-002) via the official update channels; see prov...

CVE-2008-0996

CVE-2008-0996 affects the Printing component in Apple Mac OS X 10.5.2. When starting a job on an authenticated print queue, credentials used for authentication may be saved to disk, enabling local users to obtain those credentials. The available connected documents confirm the vulnerability descr...

CVE-2008-0996

The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials...

[Full-disclosure] Canon Multi Function Devices vulnerable to FTP bounce attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Indiana University Security Advisory: Canon Multi Function Devices vulnerable to FTP bounce attack. Advisory ID: 20080229 Canon MFD FTP bounce attack Advisory revisions: 02-29-2008 0500 UTC 1.0 Initial Public Release Credit/acknowledgement:...

CUPS多个远程拒绝服务漏洞

BUGTRAQ ID: 27988 CVECAN ID: CVE-2008-0596,CVE-2008-0597 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理通过IPP添加和删除远程共享打印机的方式存在漏洞，远程攻击者可以发送恶意UDP IPP报文导致CUPS守护程序试图引用已经释放的内存，出现崩溃。...

[SECURITY] Fedora 7 Update: cups-1.2.12-9.fc7

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

[SECURITY] Fedora 8 Update: cups-1.3.6-2.fc8

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

cups security update

CentOS Errata and Security Advisory CESA-2008:0153 Updated cups packages that fixes two security issues and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System...

cups: dereference of free'd memory handling IPP browse requests

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

cups: memory leak handling IPP browse requests

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

Important: Red Hat Security Advisory: cups security update

Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

Important: Red Hat Security Advisory: cups security update

Updated cups packages that fixes two security issues and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR...

cups: memory leak handling IPP browse requests

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

cups: dereference of free'd memory handling IPP browse requests

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...