CUPS -- local information disclosure

Certain methods of authenticated remote printing in CUPS can disclose user names and passwords in the log files. A workaround for this problem is to set more strict access permissions on the CUPS logfiles...

GLSA-200409-25 : CUPS: Denial of service vulnerability

The remote host is affected by the vulnerability described in GLSA-200409-25 CUPS: Denial of service vulnerability Alvaro Martinez Echevarria discovered a hole in the CUPS Internet Printing Protocol IPP implementation that allows remote attackers to cause CUPS to stop listening on the IPP port...

CUPS: Denial of service vulnerability

Background The Common UNIX Printing System CUPS is a cross-platform print spooler. Description Alvaro Martinez Echevarria discovered a hole in the CUPS Internet Printing Protocol IPP implementation that allows remote attackers to cause CUPS to stop listening on the IPP port. Impact A remote user...

CVE-2004-0558

The CVE-2004-0558 entry covers the Internet Printing Protocol (IPP) implementation in CUPS prior to version 1.1.21. It allows remote attackers to cause a denial of service (service hang) by sending a specific UDP packet to the IPP port. The documented impact is a partial availability degradation....

CVE-2004-0558

The Internet Printing Protocol IPP implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service service hang via a certain UDP packet to the IPP port...

CVE-2004-0558

The Internet Printing Protocol IPP implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service service hang via a certain UDP packet to the IPP port...

security flaw

The Internet Printing Protocol IPP implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service service hang via a certain UDP packet to the IPP port...

Moderate: Red Hat Security Advisory: cups security update

Updated cups packages that fix a denial of service vulnerability are now available. The Common UNIX Printing System CUPS is a print spooler. Alvaro Martinez Echevarria reported a bug in the CUPS Internet Printing Protocol IPP implementation in versions of CUPS prior to 1.1.21. An attacker could...

SUSE-SA:2004:031: cups

The remote host is missing the patch for the advisory SUSE-SA:2004:031 cups. The Common Unix Printing System CUPS enables local and remote users to obtain printing functionallity via the Internet Printing Protocol IPP. Alvaro Martinez Echevarria has found a remote Denial of Service condition with...

[GLSA-200409-14] Samba: Remote printing vulnerability

The remote host is affected by the vulnerability described in GLSA-200409-14 Samba: Remote printing vulnerability Due to a bug in the printernotifyinfo function, authorized users could potentially crash the Samba server by sending improperly handled print change notification requests in an invali...

CVE-2002-1366

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

CVE-2002-1371

CVE-2002-1371 affects Common Unix Printing System (CUPS) versions 1.1.14 to 1.1.17. The vulnerability stems from improper handling of zero-length GIF images in filters/image-gif.c, allowing a remote attacker to execute arbitrary code via modified chunk headers (e.g., nogif). Public advisories (De...

CVE-2002-1371

filters/image-gif.c in Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif...

CVE-2002-1267

Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

CVE-2002-1267

CVE-2002-1267 : The provided documents describe a vulnerability in Mac OS X 10.2.2 where remote attackers can cause a denial of service by accessing the CUPS Printing Web Administration utility (CUPS Printing Web Administration is Remotely Accessible). The description does not specify the underly...

CVE-2002-1366

CVE-2002-1366 affects Common Unix Printing System (CUPS) 1.1.14–1.1.17. It is due to race conditions related to /etc/cups/certs/ that allow local users with lp privileges to create or overwrite arbitrary files. The issue enables local privilege escalation and potential filesystem manipulation. Pu...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

Mandrake Linux Security Advisory : cups (MDKSA-2003:104)

A bug in versions of CUPS prior to 1.1.19 was reported by Paul Mitcheson in the Internet Printing Protocol IPP implementation would result in CUPS going into a busy loop, which could result in a Denial of Service DoS condition. To be able to exploit this problem, an attacker would need to be able...

Mandrake Linux Security Advisory : cups (MDKSA-2003:062)

A Denial of Service DoS vulnerability was discovered in the CUPS printing system by Phil D'Amore of Red Hat. The IPP Internet Printing Protocol that CUPS uses is single-threaded and can only service one request at a time. A malicious user could create a partial request that does not time out and...