5627 matches found
CVE-2002-1370
CVE-2002-1370 is a placeholder/rejected candidate; the active vulnerability is CVE-2002-1367 in Common Unix Printing System (CUPS). CVE-2002-1367 describes remote addition of printers without authentication via a UDP packet, which can be leveraged to unauthorized activities such as theft of the l...
RHEL 4 : CUPS (RHSA-2005:053)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:053 advisory. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. During a source code audit, Chris Evans and...
Important: Red Hat Security Advisory: cups security update
Updated cups packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS is a print spooler. During a source code audit, Chris Evans discovered a number of integer...
RHEL 3 : cups (RHSA-2005:132)
Updated cups packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS is a print spooler. During a source code audit, Chris Evans discovered a number of integer...
Important: Red Hat Security Advisory: CUPS security update
Updated CUPS packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. During a source code audi...
security flaw
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...
security flaw
lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers...
security flaw
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail...
GLSA-200501-30 : CUPS: Stack overflow in included Xpdf code
The remote host is affected by the vulnerability described in GLSA-200501-30 CUPS: Stack overflow in included Xpdf code The Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Length tags in PDF files GLSA 200501-28. Impact : This issue...
RHEL 3 : cups (RHSA-2005:049)
Updated CUPS packages that fixes a security issue are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow flaw was found in the Decrypt::makeFileKey2 function of Xpdf which also affects the CUPS pdftops filter due to a...
Important: Red Hat Security Advisory: cups security update
Updated CUPS packages that fixes a security issue are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow flaw was found in the Decrypt::makeFileKey2 function of Xpdf which also affects the CUPS pdftops filter due to a...
CVE-2004-0923
CUPS 1.1.20 and earlier records authentication information for a device URI in the errorlog file, which allows local users to obtain user names and passwords...
CVE-2004-0923
CUPS 1.1.20 and earlier records authentication information for a device URI in the errorlog file, which allows local users to obtain user names and passwords...
DEBIAN-CVE-2004-0923
CUPS 1.1.20 and earlier records authentication information for a device URI in the errorlog file, which allows local users to obtain user names and passwords...
CVE-2004-0923
CUPS 1.1.20 and earlier records authentication information for a device URI in the errorlog file, which allows local users to obtain user names and passwords...
CUPS: Stack overflow in included Xpdf code
Background The Common UNIX Printing System CUPS is a cross-platform print spooler. It makes use of Xpdf code to handle PDF files. Description The Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Length tags in PDF files GLSA 200501-28...
USN-64-1: xpdf, CUPS vulnerabilities
A buffer overflow has been found in the xpdf viewer. An insufficient input validation of the encryption key length could be exploited by an attacker providing a specially crafted PDF file which, when processed by xpdf, could result in abnormal program termination or the execution of attacker...
[SECURITY] [DSA 645-1] New CUPS packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 645-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 645-1] New CUPS packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 645-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...