PT-2002-3149 · Apple · Cups

Publicado 1970-01-01 · Atualizado 2025-01-16 · CVE-2002-1372

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions 1.1.14 through 1.1.17

Description The issue is related to multiple vulnerabilities in the CUPS package, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely, potentially causing a denial of service due to resource exhaustion by assigning and not releasing file descriptors.

Recommendations For CUPS versions 1.1.14 through 1.1.17, update to a version that properly checks the return values of file and socket operations to prevent resource exhaustion. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Unchecked Return Value

Enumeração de Fraquezas

CWE-252

Identificadores relacionados

BDU:2015-01804

BDU:2015-01805

BDU:2015-07982

BDU:2015-07983

BDU:2015-07984

BDU:2015-07985

BDU:2015-07986

BDU:2015-07987

CVE-2002-1372

DSA-232

Produtos afetados

Cups

Referências · 36

• 🔥 http://idefense.com/advisory/12.19.02.txt · Exploit
• https://osv.dev/vulnerability/CVE-2002-1372 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=104032149026670&w=2 · Nota
• http://redhat.com/support/errata/RHSA-2002-295.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1366 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1372 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-07982 · Nota de Segurança
• https://t.me/cvenotify/107654 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2002-1372 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-07983 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1372 · Nota
• https://bdu.fstec.ru/vul/2015-07986 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1371 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-07984 · Nota de Segurança
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html · Nota