PT-2008-1116 · Apple+1 · Cups+1
Regenrecht
·
Publicado
2008-03-18
·
Atualizado
2024-06-15
·
CVE-2008-0047
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CUPS versions 1.3.5 and earlier
CUPS versions prior to 1.2.12-r7
Description
The issue is related to a heap-based buffer overflow in the
cgiCompileSearch function when printer sharing is enabled, allowing remote attackers to execute arbitrary code via crafted search expressions. Multiple vulnerabilities in the CUPS package can lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.Recommendations
For CUPS version 1.3.5, consider disabling the printer sharing feature until a patch is available.
For CUPS versions prior to 1.2.12-r7, update to version 1.2.12-r7 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
cgiCompileSearch function to minimize the risk of exploitation.Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cups
Red Hat