Important: Red Hat Security Advisory: cups security update

Updated cups packages that fix three security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

CUPS administrator web interface CSRF

Cross-site request forgery CSRF vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings...

CVE-2010-1379

Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service printing failure by deploying a printing device that has a Unicode character in its printing-service name...

DEBIAN-CVE-2010-0540

Cross-site request forgery CSRF vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings...

Code injection

Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service printing failure by deploying a printing device that has a Unicode character in its printing-service name...

CVE-2010-1380

Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to page sizes...

CVE-2010-1379

CVE-2010-1379 affects Apple Mac OS X 10.6 prior to 10.6.4. The vulnerability is in Printer Setup where improper interpretation of character encoding can be exploited by a printer device whose printing-service name contains a Unicode character, allowing a remote attacker to cause a denial of servi...

CVE-2010-1379

Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service printing failure by deploying a printing device that has a Unicode character in its printing-service name...

CVE-2010-1380

CVE-2010-1380 describes an integer overflow in the cgtexttops CUPS filter within Printing on Apple Mac OS X 10.6, prior to 10.6.4. The flaw could allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page sizes. Affected product/c...

Mac OS X 10.6.x < 10.6.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.4. Mac OS X 10.6.4 contains security fixes for the following components : - CUPS - DesktopServices - Flash Player plug-in - Folder Manager - Help Viewer - iChat - ImageIO - Kerberos - Kernel - libcurl - Network...

Anatomy of the Eleonore Exploit Kit

LIMASSOL, CYPRUS–When an unknown attacker compromised three domains belonging to the U.S. Bureau of Engraving and Printing last month, it became big news, mainly for the brazenness of the attack against a federal Web site. The bigger news, however, turned out to be that the attack involved the us...

Novell Distributed Print Services Integer Overflow (CVE-2006-2327)

The Novell Netware operating system as well as various other Novell products contain numerous components which serve to provide various capabilities and services. One such component is the Novell Distributed Printing Services NDPS component which provides extended printing facilities that enables...

Microsoft IIS 5.0 ISAPI Internet Printing Protocol Extension Buffer Overflow (CVE-2001-0241)

A buffer overflow in this extension IIS 5.0 can permit remote attackers to execute arbitrary code on the web server with the same privileges as the web server. The ISAPI .printer extension permits the submitting and controlling of print jobs over HTTP. There exists an unchecked buffer in the Host...

Mac OS X Security Update 2009-001

The remote host is missing Security Update 2009-001. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Microsoft IIS 5.0 - Printer Host Header Overflow (MS01-023) (Metasploit)

$Id: ms01023printer.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Joomla! Component JInventory 1.23.02 - Local File Inclusion

--------------------------------------------------------------------------------- Joomla Component JInventory Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : [email protected] Date ...

Joomla! Component JInventory 1.23.02 - Local File Inclusion

Joomla! Component JInventory 1.23.02 - Local File Inclusion --------------------------------------------------------------------------------- Joomla Component JInventory Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s...

Internet Explorer iepeers.dll use-after-free vulnerability

Added: 04/02/2010 CVE: CVE-2010-0806 BID: 38615 OSVDB: 62810 Background The iepeers.dll component of Internet Explorer provides support for Web Folders and printing. Problem A vulnerability in iepeers.dll allows a specially crafted web page to cause a pointer to be used after it has been freed,...

Internet Explorer iepeers.dll use-after-free vulnerability

Added: 04/02/2010 CVE: CVE-2010-0806 BID: 38615 OSVDB: 62810 Background The iepeers.dll component of Internet Explorer provides support for Web Folders and printing. Problem A vulnerability in iepeers.dll allows a specially crafted web page to cause a pointer to be used after it has been freed,...

openssl: ASN1 printing crash

The ASN1STRINGprintex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service invalid memory access and application crash via vectors that trigger printing of a 1 BMPString or 2 UniversalString with an invalid encoded length...