cups: world-readable permissions

It was discovered that CUPS allowed certain users to create symbolic links in certain directories under /var/cache/cups/. A local user with the 'lp' group privileges could use this flaw to read the contents of arbitrary files on the system or, potentially, escalate their privileges on the system...

Moderate: Red Hat Bug Fix Advisory: cups bug fix and enhancement update

Updated cups packages that fix several bugs and add one enhancement are now available for Red Hat Enterprise Linux 7. CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. This update fixes the following bugs: When using the cupsEnumDests API call, the libcups...

cups: Incomplete fix for CVE-2014-3537

It was discovered that CUPS allowed certain users to create symbolic links in certain directories under /var/cache/cups/. A local user with the 'lp' group privileges could use this flaw to read the contents of arbitrary files on the system or, potentially, escalate their privileges on the system...

cups: cross-site scripting flaw fixed in the 1.7.2 release

A cross-site scripting XSS flaw was found in the CUPS web interface. An attacker could use this flaw to perform a cross-site scripting attack against users of the CUPS web interface...

cups: insufficient checking leads to privilege escalation

It was discovered that CUPS allowed certain users to create symbolic links in certain directories under /var/cache/cups/. A local user with the 'lp' group privileges could use this flaw to read the contents of arbitrary files on the system or, potentially, escalate their privileges on the system...

[SECURITY] [DLA 159-1] cups security update

Package : cups Version : 1.4.4-7+squeeze7 CVE ID : CVE-2014-9679 Debian Bug : 778387 Peter De Wachter discovered that CUPS, the Common UNIX Printing System, did not correctly parse compressed raster files. By submitting a specially crafted raster file, a remote attacker could use this vulnerabili...

Ubuntu 14.04 LTS : CUPS vulnerability (USN-2520-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2520-1 advisory. Peter De Wachter discovered that CUPS incorrectly handled certain malformed compressed raster files. A remote attacker could use this issue to cause CUPS to crash...

Ubuntu: Security Advisory (USN-2520-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : cups (openSUSE-2015-182)

cups was updated to fix one security issue. This security issue was fixed : - CVE-2014-9679: A malformed compressed raster file can trigger a buffer overflow in cupsRasterReadPixels bnc917799. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

DLA-159-1 cups - security update

Bulletin has no description...

USN-2520-1: CUPS vulnerability

Peter De Wachter discovered that CUPS incorrectly handled certain malformed compressed raster files. A remote attacker could use this issue to cause CUPS to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-2520-1 cups vulnerability

Peter De Wachter discovered that CUPS incorrectly handled certain malformed compressed raster files. A remote attacker could use this issue to cause CUPS to crash, resulting in a denial of service, or possibly execute arbitrary code...

Debian DSA-3172-1 : cups - security update

Peter De Wachter discovered that CUPS, the Common UNIX Printing System, did not correctly parse compressed raster files. By submitting a specially crafted raster file, a remote attacker could use this vulnerability to trigger a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] [DSA 3172-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3172-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3172-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3172-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 25, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3172-1 (cups - security update)

Peter De Wachter discovered that CUPS, the Common UNIX Printing System, did not correctly parse compressed raster files. By submitting a specially crafted raster file, a remote attacker could use this vulnerability to trigger a buffer overflow. OpenVAS Vulnerability Test $Id: deb3172.nasl 6609...

DSA-3172-1 cups - security update

Bulletin has no description...

SUSE-SU-2015:0465-1 Security update for cups, cups154

cups, cups154 was updated to fix one security issue. This security issue was fixed: - CVE-2014-9679: A malformed compressed raster file can trigger a buffer overflow in cupsRasterReadPixels bnc917799...

Debian: Security Advisory (DSA-3172-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : cups-1.7.5-12.fc20 (2015-2152)

This update fixes CVE-2014-9679, a buffer overflow when handling CUPS Raster format. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...