CVE-2002-1371

CVE-2002-1371 affects Common Unix Printing System (CUPS) versions 1.1.14 to 1.1.17. The vulnerability stems from improper handling of zero-length GIF images in filters/image-gif.c, allowing a remote attacker to execute arbitrary code via modified chunk headers (e.g., nogif). Public advisories (De...

CVE-2002-1366

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

CVE-2002-1371

filters/image-gif.c in Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif...

CVE-2002-1267

Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."...

CVE-2002-1366

CVE-2002-1366 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17. It is due to race conditions related to /etc/cups/certs/ that allow local users with lp privileges to create or overwrite arbitrary files. The issue enables local privilege escalation and potential filesystem manipulation. Pu...

CVE-2002-1267

CVE-2002-1267 : The provided documents describe a vulnerability in Mac OS X 10.2.2 where remote attackers can cause a denial of service by accessing the CUPS Printing Web Administration utility (CUPS Printing Web Administration is Remotely Accessible). The description does not specify the underly...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

Mandrake Linux Security Advisory : cups (MDKSA-2003:104)

A bug in versions of CUPS prior to 1.1.19 was reported by Paul Mitcheson in the Internet Printing Protocol IPP implementation would result in CUPS going into a busy loop, which could result in a Denial of Service DoS condition. To be able to exploit this problem, an attacker would need to be able...

Mandrake Linux Security Advisory : cups (MDKSA-2003:062)

A Denial of Service DoS vulnerability was discovered in the CUPS printing system by Phil D'Amore of Red Hat. The IPP Internet Printing Protocol that CUPS uses is single-threaded and can only service one request at a time. A malicious user could create a partial request that does not time out and...

Mandrake Linux Security Advisory : cups (MDKSA-2001:048)

The version of cups shipped with Linux-Mandrake 8.0 has a problem where when a user prints a multi-page PostScript file with embedded pictures, the pages following the first with the picture are all printed on the same page, one on top of the other. From multi-page Abiword files only text only th...

Rlpr Advisory

,'| .-''-.....--'; / '. ..-' , ,--...--''' .--''' /' -';' ; ; ; ...--'' ...--..' .;.' fL ,....----''' ,..--'' felinemenace.org Program: rlprd 2.0.4 Impact: remote root Discovered: jaguar Writeup and exploits: Andrew Griffiths 1 Background It is a package that makes it possible or at the very leas...

CVE-2004-0382

Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting...

Internet Explorer unauthorized print access

It's possible to print document from JavaScript...

IE 6 Print Without Prompt

Ben Garvey Application: Microsoft Internet Explorer Versions: 6.0 Platforms: Windows Bugs: IE 6 allows JavaScript to send documents to the printer without prompting the user. Exploitation: Client Date: 12 April 2004 Author: Ben Garvey [email protected] http://www.bengarvey.com Bugtraq report...

MSIE.printer.txt

Ben Garvey Application: Microsoft Internet Explorer Versions: 6.0 Platforms: Windows Bugs: IE 6 allows JavaScript to send documents to the printer without prompting the user. Exploitation: Client Date: 12 April 2004 Author: Ben Garvey [email protected] http://www.bengarvey.com Bugtraq report...

CVE-2004-0382

Technical details are not publicly available in the provided documents for CVE-2004-0382. Monitor for updates; the entries show unknown impact and lack concrete root cause/exploit information.

CVE-2004-0382

Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting...

Solaris conv_fix insecure file handling vulnerability

Overview A vulnerability in a program supplied with the Solaris printing system could allow a local attacker to gain elevated privileges on the system. Description The Solaris operating system from Sun Microsystems includes a number of supplemental programs to aid in configuration and maintenance...

CVE-2003-0788

Unknown vulnerability in the Internet Printing Protocol IPP implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service CPU consumption from a "busy loop" via certain inputs to the IPP port TCP 631...