USN-563-1: CUPS vulnerabilities

Wei Wang discovered that the SNMP discovery backend did not correctly calculate the length of strings. If a user were tricked into scanning for printers, a remote attacker could send a specially crafted packet and possibly execute arbitrary code. Elias Pipping discovered that temporary files were...

openSUSE 10 Security Update : net-snmp (net-snmp-4753)

This update of net-snmp fixes the following bugs : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords - the UCD-SNMP-MIB::memCached.0 SNMP object was missing - the snmptrap command from t...

openSUSE 10 Security Update : net-snmp (net-snmp-4759)

This update of net-snmp fixes the following bug : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CUPS SNMP后端asn1_get_string()函数远程栈溢出漏洞

BUGTRAQ ID: 26917 CVECAN ID: CVE-2007-5849 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理包含畸形数据的SNMP请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。...

Debian DSA-1437-1 : cupsys - several vulnerabilities

Several local vulnerabilities have been discovered in the Common UNIX Printing System. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5849 Wei Wang discovered that an buffer overflow in the SNMP backend may lead to the execution of arbitrary code. ...

CVE-2007-5849

Integer underflow in the asn1getstring function in the SNMP back end backend/snmp.c for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow...

Integer overflow

Integer underflow in the asn1getstring function in the SNMP back end backend/snmp.c for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow...

CVE-2007-5849

Integer underflow in the asn1getstring function in the SNMP back end backend/snmp.c for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow...

CVE-2007-5849

Integer underflow in the asn1getstring function in the SNMP back end backend/snmp.c for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow...

CVE-2007-5849

Integer underflow in the asn1getstring function in the SNMP back end backend/snmp.c for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow...

CVE-2007-5849

CVE-2007-5849 affects CUPS 1.2–1.3.4 with an integer underflow in the asn1_get_string function of the SNMP back end (backend/snmp.c). A crafted SNMP response can trigger a stack-based buffer overflow, enabling remote code execution. Public advisories (Mandriva MDVSA-2008:036, Ubuntu USN-563-1) do...

CVE-2007-5849

Integer underflow in the asn1getstring function in the SNMP back end backend/snmp.c for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow...

CUPS SNMP Back End (backend/snmp.c) asn1_get_string Function Crafted SNMP Response Remote Overflow

According to its banner, the version of CUPS installed on the remote host contains a stack-based integer overflow in 'asn1getstring' in 'backend/snmp.c'. Provided the SNMP backend is configured in CUPS true by default in CUPS 1.2 but not 1.3, an attacker may be able to exploit this issue by using...

CVE-2007-5849: Undefined Security Weakness

Integer underflow in the asn1getstring function in the SNMP back end backend/snmp.c for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow...

GLSA-200712-14 : CUPS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-14 CUPS: Multiple vulnerabilities Wei Wang McAfee AVERT Research discovered an integer underflow in the asn1getstring function of the SNMP backend, leading to a stack-based buffer overflow when handling SNMP responses...

CUPS < 1.3.5 Back End SNMP Response Remote Overflow

Binary data 4320.prm...

CUPS: Multiple vulnerabilities

Background CUPS provides a portable printing layer for UNIX-based operating systems. The alternate pdftops filter is a CUPS filter used to convert PDF files to the Postscript format via Poppler; the filter is installed by default in Gentoo Linux. Description Wei Wang McAfee AVERT Research...

SuSE 10 Security Update : net-snmp (ZYPP Patch Number 4755)

This update of net-snmp fixes the following bug : - default and configurable maximum number of varbinds returnable to a GETBULK request. CVE-2007-5846 - crash when smux peers were configured with empty passwords %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

Check Point response to NET-SNMP vulnerability CVE-2007-5846

...

Linux Kernel &lt; 2.6.16.18 (Netfilter NAT SNMP Module) Remote DoS Exploit

No description provided by source. / ecl-nf-snmpwn.c - 30/05/06 Alex Behar [email protected] Yuri Gushin [email protected] A patch review we did on the 2.6.16.17-18 Linux kernel source tree revealed a restructuring of code in the snmpparsemangle and the snmptrapdecode functions. After further...