PT-2003-1079 · Apple · Cups

Paul D. Mitcheson

·

Publicado

2003-11-03

·

Atualizado

2017-07-11

·

CVE-2003-0788

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions CUPS versions prior to 1.1.19
Description The issue is related to the Internet Printing Protocol (IPP) implementation in CUPS, which allows remote attackers to cause a denial of service via certain inputs to the IPP port (TCP 631). This can lead to CPU consumption from a "busy loop". Additionally, there are multiple vulnerabilities in the CUPS package of Red Hat Linux that can be exploited remotely, potentially disrupting the confidentiality, integrity, and availability of protected information.
Recommendations For versions prior to 1.1.19, update to version 1.1.19 or later to resolve the issue. As a temporary workaround, consider restricting access to the IPP port (TCP 631) to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-07983
BDU:2015-07985
BDU:2015-07987
CVE-2003-0788

Produtos afetados

Cups