6309 matches found
Mandrake Linux Security Advisory : cups (MDKSA-2005:165)
A vulnerability in CUPS would treat a Location directive in cupsd.conf as case-sensitive, allowing attackers to bypass intended ACLs via a printer name containing uppercase or lowecase letters that are different from that which was specified in the Location directive. This issue only affects...
Mandrake Linux Security Advisory : cups (MDKSA-2005:138-1)
A vulnerability was discovered in the CUPS printing package where when processing a PDF file, bounds checking was not correctly performed on some fields. As a result, this could cause the pdtops filter to crash. Update : The patch to correct this problem was not properly applied to the Mandriva...
Fedora Core 3 : cups-1.1.22-0.rc1.8.7 (2005-908)
A bug was found in the way CUPS processes malformed HTTP requests. It is possible for a remote user capable of connecting to the CUPS daemon to issue a malformed HTTP GET request which will cause CUPS to enter an infinite loop. This is CVE-2005-2874. Note that Tenable Network Security has extract...
cups security update
CentOS Errata and Security Advisory CESA-2005:772 Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a...
security flaw
The ispathabsolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service CPU consumption by tight loop via a "...." URL in an HTTP request...
Moderate: Red Hat Security Advisory: cups security update
Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating systems....
USN-185-1: CUPS vulnerability
A flaw was detected in the printer access control list checking in the CUPS server. Printer names were compared in a case sensitive manner; by modifying the capitalization of printer names, a remote attacker could circumvent ACLs and print to printers he should not have access to. The Ubuntu 5.04...
CVE-2005-2874
The ispathabsolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service CPU consumption by tight loop via a "...." URL in an HTTP request...
CVE-2005-2874
The ispathabsolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service CPU consumption by tight loop via a "...." URL in an HTTP request...
CVE-2005-2874
The ispathabsolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service CPU consumption by tight loop via a "...." URL in an HTTP request...
CVE-2005-2874
The ispathabsolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service CPU consumption by tight loop via a "...." URL in an HTTP request...
CVE-2005-2874
CVE-2005-2874 affects the Common UNIX Printing System (CUPS) prior to 1.1.23, where the is_path_absolute check in scheduler/client.c can be bypassed by a crafted URL ("..\.."), leading to a denial of service via a tight CPU loop when handling HTTP requests. Public advisories (RHSA-2005:772 / CESA...
CVE-2005-2874
The ispathabsolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service CPU consumption by tight loop via a "...." URL in an HTTP request...
CVE-2005-2874: Undefined Security Weakness
The ispathabsolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service CPU consumption by tight loop via a "...." URL in an HTTP request...
CUPS Unix print system DoS
HTTP GET request with .... in the path causes infinite loop in service...
[EXPL] CUPS Dot-Slash DoS
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CUPS Server <= 1.1 (Get Request) Denial of Service Exploit
Exploit for linux platform in category dos / poc ========================================================== CUPS Server include include include include char EVIL = "\x2e\x2e\x5c\x2e\x2e"; void usagechar argv0 fprintfstdout, "cups/1.x server freeze and remote cpu usage fuckup\n"; fprintfstdout,...
CUPS Server <= 1.1 (Get Request) Denial of Service Exploit
No description provided by source. / dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include stdio.h include sys/types.h include sys/socket.h include...
CUPS Server 1.1 - GET Denial of Service
CUPS Server 1.1 - GET Denial of Service / dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include include include include include char EVIL =...
CUPS Server 1.1 - GET Denial of Service
/ dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include include include include include char EVIL = "\x2e\x2e\x5c\x2e\x2e"; void usagechar argv0...