Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-0047
HistoryMar 18, 2008 - 12:00 a.m.

CVE-2008-0047

2008-03-1800:00:00
ubuntu.com
ubuntu.com
8

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.855 High

EPSS

Percentile

98.5%

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5,
and other versions including the version bundled with Apple Mac OS X
10.5.2, when printer sharing is enabled, allows remote attackers to execute
arbitrary code via crafted search expressions.

Bugs

Notes

Author Note
jdstrand CUPS 1.2.0 through 1.3.6 cgiCompileSearch() heap overflow
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchcupsys<Β 1.2.2-0ubuntu0.6.06.8UNKNOWN
ubuntu6.10noarchcupsys<Β 1.2.4-2ubuntu3.3UNKNOWN
ubuntu7.04noarchcupsys<Β 1.2.8-0ubuntu8.3UNKNOWN
ubuntu7.10noarchcupsys<Β 1.3.2-1ubuntu7.6UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.855 High

EPSS

Percentile

98.5%