Mandriva Linux Security Advisory : cups (MDVSA-2008:211)

A buffer overflow in the SGI image format decoding routines used by the CUPS image converting filter imagetops was discovered. An attacker could create malicious SGI image files that could possibly execute arbitrary code if the file was printed CVE-2008-3639. An integer overflow flaw leading to a...

Ubuntu Update for cupsys vulnerabilities USN-656-1

Ubuntu Update for Linux kernel vulnerabilities USN-656-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6561.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for cupsys vulnerabilities USN-656-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

RedHat Update for cups RHSA-2008:0937-01

Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2008:0937-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CentOS Update for cups CESA-2008:0937 centos3 i386

Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2008:0937 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for cups CESA-2008:0937 centos3 x86_64

Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2008:0937 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Debian Security Advisory DSA 1656-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory DSA 1656-1. OpenVAS Vulnerability Test $Id: deb16561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1656-1 cupsys Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

irix rpc.passwd overflow

The remote RPC service 100009 yppasswdd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. OpenVAS Vulnerability Test $Id: sgirpcpasswd.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: irix rpc.passwd overflow Authors: Renaud Deraison Copyright:...

Debian DSA-1656-1 : cupsys - several vulnerabilities

Several local vulnerabilities have been discovered in the Common UNIX Printing System. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3639 It was discovered that insufficient bounds checking in the SGI image filter may lead to the execution of...

CVE-2008-3639

Heap-based buffer overflow in the readrle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded RLE data containing a small image and a large row count...

DEBIAN-CVE-2008-3639

Heap-based buffer overflow in the readrle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded RLE data containing a small image and a large row count...

Heap overflow

Heap-based buffer overflow in the readrle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded RLE data containing a small image and a large row count...

CVE-2008-3639

Heap-based buffer overflow in the readrle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded RLE data containing a small image and a large row count...

CVE-2008-3639

Heap-based buffer overflow in the readrle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded RLE data containing a small image and a large row count...

Apache Tomcat 'RemoteFilterValve'安全绕过漏洞

BUGTRAQ ID: 31698 CVE ID：CVE-2008-3271 CNCVE ID：CNCVE-20083271 Apache Tomcat是一款流行的开放源码的JSP应用服务器程序。 Apache Tomcat处理'RemoteFilterValve'扩展存在安全绕过问题，远程攻击者可以利用漏洞绕过访问限制，获得敏感信息。 在使用RemoteAddrValve允许部分地址访问引擎时： Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="a.b.c.d"/...

CUPS < 1.3.9 Multiple Vulnerabilities

Binary data 4707.prm...

FreeBSD : cups -- multiple vulnerabilities (ce29ce1d-971a-11dd-ab7e-001c2514716c)

The release note of cups 1.3.9 reports : It contains the following fixes : - SECURITY: The HP-GL/2 filter did not range check pen numbers STR 2911 - SECURITY: The SGI image file reader did not range check 16-bit run lengths STR 2918 - SECURITY: The text filter did not range check cpi, lpi, or...

cups security update

CentOS Errata and Security Advisory CESA-2008:0937 Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing...

Important: Red Hat Security Advisory: cups security update

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNI...

CentOS 3 / 4 / 5 : cups (CESA-2008:0937)

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNI...

CUPS < 1.3.9 Multiple Vulnerabilities

According to its banner, the version of CUPS installed on the remote host is earlier than 1.3.9. Such versions are affected by several issues : - The HP-GL/2 filter does not adequately check the ranges on the pen width and pen color opcodes that allows an attacker to overwrite memory addresses wi...