CVE-2008-1033

Summary: CVE-2008-1033 is a CUPS scheduler issue on Mac OS X 10.5.x. When debug logging is enabled and a printer requires a password, the scheduler’s improper handling of authentication environment variables may disclose credentials by reading log data. Affected versions: Mac OS X 10.5 up to 10.5...

CVE-2007-4045

CVE-2007-4045 affects the CUPS daemon (CUPS) in SUSE Linux before 20070720 and other distros, linked to an incomplete fix for CVE-2007-0720 that introduced a denial-of-service in SSL negotiation. The issue is described in multiple advisories (e.g., RHSA-2007-1022/1023, ELSA advisories) stating th...

CVE-2009-0195

CVE-2009-0195 describes a heap-based buffer overflow in the JBIG2 decoder affecting Xpdf 3.02pl2 and earlier (and possibly other products, e.g., CUPS 1.3.9 ), allowing a remote attacker to execute arbitrary code via a crafted PDF containing JBIG2 symbol dictionary segments. The connected MiracleL...

CVE-2008-5377

CVE-2008-5377 : A local privilege-escalation in CUPS 1.3.8 via the pstopdf filter. The vulnerability arises from a symlink attack on the temporary file /tmp/pstopdf.log, allowing local users to overwrite arbitrary files and potentially gain elevated privileges. Public references include exploit-d...

CVE-2009-0577

CVE-2009-0577 arises from an integer overflow in the PostScript conversion tool within CUPS when processing a crafted PostScript file, triggering a heap-based buffer overflow in the texttops WriteProlog path. Affected: CUPS 1.1.17 on Red Hat Enterprise Linux 3 (RHEL3). Impact per sources: remote ...

CVE-2009-1196

CVE-2009-1196 affects CUPS where the directory-services in the scheduler is vulnerable due to a use-after-free flaw in the directory services routine. This can allow a remote attacker to cause a denial of service (cupsd outage or crash) by manipulating the timing of CUPS browse packets. Affected ...