PT-2014-5819 · Cups+1 · Cups-Filters+1

Publicado 2014-05-08 · Atualizado 2024-06-15 · CVE-2014-4336

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions cups-filters versions prior to 1.0.53

Description The issue allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name, due to an incomplete fix for a previous security issue. This is related to the generate local queue function in utils/cups-browsed.c.

Recommendations For versions prior to 1.0.53, update to version 1.0.53 or later to resolve the issue. As a temporary workaround, consider restricting access to the generate local queue function in utils/cups-browsed.c to minimize the risk of exploitation.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

ALT-PU-2014-1665

CVE-2014-4336

MGASA-2014-0267

OPENSUSE-SU-2024:10313-1

USN-2210-1

Produtos afetados

Alt Linux

Cups-Filters

Referências · 47

• https://ubuntu.com/security/CVE-2014-2707 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2210-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-06084 · Nota de Segurança
• http://openwall.com/lists/oss-security/2014/04/25/7 · Correção
• https://bdu.fstec.ru/vul/2015-09199 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2014-4336 · Nota
• https://suse.com/security/cve/CVE-2015-8560 · Nota
• https://osv.dev/vulnerability/USN-2210-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2014-4336 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2707 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-4337 · Nota
• https://suse.com/security/cve/CVE-2015-2265 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4336 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-09753 · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=13273 · Nota