CUPS multiple bugs

Integer overflows, symbolic links, unautyhorized access, DoS, переполнения буфера...

iDEFENSE Security Advisory 12.23.02: Integer Overflow in pdftops

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 12.23.02: http://www.idefense.com/advisory/12.23.02.txt Integer Overflow in pdftops December 23, 2002 Reference Advisory: http://www.idefense.com/advisory/12.19.02.txt Multiple Security Vulnerabilities in Common Unix Printin...

CVE-2002-1383

CVE-2002-1383 corresponds to multiple integer overflows in the Common Unix Printing System (CUPS) versions 1.1.14–1.1.17. The issue allows a remote attacker to execute arbitrary code via the CUPSd HTTP interface or via the image handling code in CUPS filters. Connected advisories (e.g., Debian DS...

CVE-2002-1383

Multiple integer overflows in Common Unix Printing System CUPS 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via 1 the CUPSd HTTP interface, as demonstrated by vanilla-coke, and 2 the image handling code in CUPS filters, as demonstrated by mksun...

CVE-2002-1368

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing negative arguments to be fed into memcpy calls via HTTP requests with 1 a negative Content-Length value or 2 a negative length in a...

CVE-2002-1368

CVE-2002-1368 affects CUPS 1.1.14–1.1.17 and can be exploited remotely by sending HTTP requests with a negative Content-Length or negative chunked length, causing negative arguments to memcpy() and potentially triggering a crash or arbitrary code execution. The vulnerability arises from improper ...

iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 12.19.02: http://www.idefense.com/advisory/12.19.02.txt Multiple Security Vulnerabilities in Common Unix Printing System CUPS December 19, 2002 I. BACKGROUND Easy Software Products' Common Unix Printing System CUPS is a...

CUPS 1.1.x - Negative Length HTTP Header

source: https://www.securityfocus.com/bid/6437/info A vulnerability has been reported for CUPS that if exploited may result in a DoS or the execute of code on affected systems. An attacker can exploit this vulnerability by connecting to a vulnerable system and issuing malformed HTTP headers with ...

CUPS 1.1.x - Negative Length HTTP Header

CUPS 1.1.x - Negative Length HTTP Header source: https://www.securityfocus.com/bid/6437/info A vulnerability has been reported for CUPS that if exploited may result in a DoS or the execute of code on affected systems. An attacker can exploit this vulnerability by connecting to a vulnerable system...

CVE-2002-1267

Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."...

CVE-2002-0063

Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values...

CVE-2002-0063

CVE-2002-0063 affects CUPS prior to 1.1.14, where a buffer overflow in ippRead (triggered by long attribute names or language values) could allow remote arbitrary-code execution. Upstream fixes exist in 1.1.14+; debian/mandrake advisories reference this fix. Remediation: upgrade CUPS to 1.1.14 or...

CVE-2001-1333

Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files...

CVE-2001-1332

CVE-2001-1332 affects Linux CUPS earlier than 1.1.6, where buffer overflows can allow remote code execution over the network (no authentication required; low complexity). Upstream remediation indicated as upgrading to 1.1.7 or newer (Mandrake/MK advisories reference upstream fix). If upgrading is...

CVE-2001-1333

CVE-2001-1333 affects Linux CUPS prior to 1.1.6 where temporary files are not securely handled, enabling local users to overwrite files via a symlink vulnerability. The NVD data lists a local attack vector, high attack complexity, no authentication, no confidentiality impact, but partial integrit...

CVE-2001-1332

Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code...

CVE-2002-0063

Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values...

Дырки в cups

DoS атака путем некорректного запроса, кроме того любой желающий мог использовать принтеры cups. Проблемы временных файлов. Потенциальные переполнения буфера...

CUPS ippRead() attribute name buffer overflow

cups-ippread-bo 8192 High Risk CUPS ippRead attribute name buffer overflow Description: Common Unix Printing System CUPS versions 1.1.13 and earlier are vulnerable to a denial of service attack caused by a buffer overflow in the handling of attribute names in the ippRead function. By setting a ve...

[SECURITY] [DSA 110-1] New CUPS packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 110-1 [email protected] http://www.debian.org/security/ Martin Schulze February 13th, 2002 - -------------------------------------------------------------------------- Package : cupsys...