Apple Mac OS X Multiple Vulnerabilities - 02 (Jan 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for cups USN-2082-1

Check for the Version of cups OpenVAS Vulnerability Test $Id: gbubuntuUSN20821.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for cups USN-2082-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Ubuntu: Security Advisory (USN-2082-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

cups information leakage

lppasswd allows to read information from local files...

[USN-2082-1] CUPS vulnerability

========================================================================== Ubuntu Security Notice USN-2082-1 January 15, 2014 cups vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

Ubuntu 12.10 / 13.04 / 13.10 : cups vulnerability (USN-2082-1)

Jann Horn discovered that the CUPS lppasswd tool incorrectly read a user configuration file in certain configurations. A local attacker could use this to read sensitive information from certain files, bypassing access restrictions. Note that Tenable Network Security has extracted the preceding...

USN-2082-1: CUPS vulnerability

Jann Horn discovered that the CUPS lppasswd tool incorrectly read a user configuration file in certain configurations. A local attacker could use this to read sensitive information from certain files, bypassing access restrictions...

CUPS 1.6.x >= 1.6.4 / 1.7.x < 1.7.1 lppasswd Information Disclosure

According to its banner, the version of CUPS installed on the remote host is 1.6.x greater or equal to 1.6.4 or 1.7.x earlier than 1.7.1. It is, therefore, potentially affected by an information disclosure vulnerability related to the 'lppasswd' binary, setuid settings, and the use of...

CVE-2013-6891

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf...

IT-Grundschutz M5.145: Sicherer Einsatz von CUPS

IT-Grundschutz M5.145: Sicherer Einsatz von CUPS. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94172 Stand: 13. Ergänzungslieferung 13. EL. SPDX-FileCopyrightText:...

IT-Grundschutz M5.145: Sicherer Einsatz von CUPS

IT-Grundschutz M5.145: Sicherer Einsatz von CUPS. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94172 Stand: 13. Ergänzungslieferung 13. EL. OpenVAS Vulnerability Tes...

SuSE 11.2 / 11.3 Security Update : CUPS (SAT Patch Numbers 8436 / 8437)

The following security issue has been fixed in the CUPS print daemon CVE-2012-5519: The patch adds better default protection against misuse of privileges by normal users who have been specifically allowed by root to do cupsd configuration changes The new ConfigurationChangeRestriction cupsd.conf...

Cisco Unified Communications Manager (CUCM) Web Detection

The web interface for Cisco Unified Communications Manager CUCM was detected. Note: This plugin does not report anything. It only collects version information to be used downstream. C Tenable, Inc. include'compat.inc'; if description scriptid70088; scriptversion"1.9";...

Amazon Linux AMI : cups (ALAS-2013-170)

It was discovered that CUPS administrative users members of the SystemGroups groups who are permitted to perform CUPS configuration changes via the CUPS web interface could manipulate the CUPS configuration to gain unintended privileges. Such users could read or write arbitrary files with the...

Oracle Linux 4 : cups (ELSA-2008-0161)

From Red Hat Security Advisory 2008:0161 : Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a...

Oracle Linux 3 : cups (ELSA-2008-1028)

From Red Hat Security Advisory 2008:1028 : Updated cups packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIXr Printing System CUPS provides a portab...

Oracle Linux 5 : cups (ELSA-2010-0811)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0811 advisory. - Applied patch to fix cupsd memory corruption vulnerability CVE-2010-2941, STR 3648, bug 624438. Tenable has extracted the preceding description block...

Oracle Linux 3 : cups (ELSA-2009-0308)

From Red Hat Security Advisory 2009:0308 : Updated cups packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIXr Printing System CUPS provides a...

Oracle Linux 5 : Important: / cups (ELSA-2007-0720)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0720 advisory. 1.1.22-0.rc1.9.20.2 - Better patch for CVE-2007-3387 bug 248220. 1.1.22-0.rc1.9.20.1 - Applied patch to fix CVE-2007-3387 bug 248220. Tenable has extracted the...

Oracle Linux 5 : cups (ELSA-2009-0429)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0429 advisory. 1:1.3.7-8:.4 - Applied additional patches by Tim Waugh for batch3892.pdf, batch4781.pdf, batch5486.pdf, batch19856.pdf, batch19869.pdf testing files fr...