PT-2002-3145 · Apple · Cups
Publicado
1970-01-01
·
Atualizado
2017-10-10
·
CVE-2002-1367
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CUPS versions 1.1.14 through 1.1.17
Description
The issue concerns multiple vulnerabilities in the CUPS package, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. According to the information provided, an attacker can add printers without authentication via a certain UDP packet, potentially allowing unauthorized activities such as stealing the local root certificate for the administration server.
Recommendations
For CUPS versions 1.1.14 through 1.1.17, consider disabling the ability to add printers without authentication as a temporary workaround until a patch is available. Restrict access to the administration server to minimize the risk of exploitation. Avoid using the "need authorization" page in the affected CUPS versions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cups