CUPS vulnerability

2007-11-0600:00:00

ubuntu.com

6.5 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.092 Low

EPSS

Percentile

94.6%

JSON

Releases

Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Packages

cupsys -

Details

Alin Rad Pop discovered that CUPS did not correctly validate buffer
lengths when processing IPP tags. Remote attackers successfully
exploiting this vulnerability would gain access to the non-root CUPS user
in Ubuntu 6.06 LTS, 6.10, and 7.04. In Ubuntu 7.10, attackers would be
isolated by the AppArmor CUPS profile.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchcupsys< 1.3.2-1ubuntu7.1UNKNOWN
Ubuntu7.10noarchcupsys-bsd< 1.3.2-1ubuntu7.1UNKNOWN
Ubuntu7.10noarchcupsys-client< 1.3.2-1ubuntu7.1UNKNOWN
Ubuntu7.10noarchlibcupsimage2< 1.3.2-1ubuntu7.1UNKNOWN
Ubuntu7.10noarchlibcupsimage2-dev< 1.3.2-1ubuntu7.1UNKNOWN
Ubuntu7.10noarchlibcupsys2< 1.3.2-1ubuntu7.1UNKNOWN
Ubuntu7.10noarchlibcupsys2-dev< 1.3.2-1ubuntu7.1UNKNOWN
Ubuntu7.04noarchcupsys< 1.2.8-0ubuntu8.1UNKNOWN
Ubuntu7.04noarchcupsys-bsd< 1.2.8-0ubuntu8.1UNKNOWN
Ubuntu7.04noarchcupsys-client< 1.2.8-0ubuntu8.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.10	noarch	cupsys	< 1.3.2-1ubuntu7.1	UNKNOWN
Ubuntu	7.10	noarch	cupsys-bsd	< 1.3.2-1ubuntu7.1	UNKNOWN
Ubuntu	7.10	noarch	cupsys-client	< 1.3.2-1ubuntu7.1	UNKNOWN
Ubuntu	7.10	noarch	libcupsimage2	< 1.3.2-1ubuntu7.1	UNKNOWN
Ubuntu	7.10	noarch	libcupsimage2-dev	< 1.3.2-1ubuntu7.1	UNKNOWN
Ubuntu	7.10	noarch	libcupsys2	< 1.3.2-1ubuntu7.1	UNKNOWN
Ubuntu	7.10	noarch	libcupsys2-dev	< 1.3.2-1ubuntu7.1	UNKNOWN
Ubuntu	7.04	noarch	cupsys	< 1.2.8-0ubuntu8.1	UNKNOWN
Ubuntu	7.04	noarch	cupsys-bsd	< 1.2.8-0ubuntu8.1	UNKNOWN
Ubuntu	7.04	noarch	cupsys-client	< 1.2.8-0ubuntu8.1	UNKNOWN