5624 matches found
[SECURITY] [DSA 2990-1] cups security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2990-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...
DSA-2990-1 cups - security update
Bulletin has no description...
Debian: Security Advisory (DSA-2990-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-3537
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/...
CVE-2014-3537
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/...
DEBIAN-CVE-2014-3537
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/...
Design/Logic Flaw
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/...
CVE-2014-3537
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/...
CVE-2014-3537
CVE-2014-3537 affects the CUPS web interface on systems running vulnerable CUPS versions prior to 1.7.4. A local attacker with lp group privileges can exploit a symlink vulnerability in /var/cache/cups/rss to read arbitrary files. Several advisories (Debian, Red Hat, Mandriva, EulerOS, etc.) refe...
CVE-2014-3537
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/...
[USN-2293-1] CUPS vulnerability
========================================================================== Ubuntu Security Notice USN-2293-1 July 21, 2014 cups vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...
Ubuntu 14.04 LTS : CUPS vulnerability (USN-2293-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2293-1 advisory. Francisco Alonso discovered that the CUPS web interface incorrectly validated permissions on rss files. A local attacker could possibly use this issue to bypass...
USN-2293-1: CUPS vulnerability
Francisco Alonso discovered that the CUPS web interface incorrectly validated permissions on rss files. A local attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation...
Fedora 20 : cups-1.7.4-1.fc20 (2014-8351)
New upstream release which among others fixes one security flaw. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...
Fedora Update for cups FEDORA-2014-8351
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 20 Update: cups-1.7.4-1.fc20
CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...
CVE-2014-3537
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/...
CUPS <= 1.3.7 'HP-GL/2' Filter Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31688/info CUPS is prone to a remote code-execution vulnerability caused by an error in the 'HP-GL/2 filter. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Faile...
CUPS 1.1.x UDP Packet Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11183/info CUPS is prone to a remotely exploitable denial of service vulnerability that may be triggered through port 631 by a zero-length UDP packet. nmap -sU -p 631 example.com...
Common UNIX Printing System 1.2/1.3 SNMP 'asn1_get_string()' Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26917/info Common UNIX Printing System CUPS is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer...