PT-2002-3144 · Apple · Cups

Published 1970-01-01 · Updated 2017-10-10 · CVE-2002-1366

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions 1.1.14 through 1.1.17

Description The issue affects the Common Unix Printing System (CUPS) and can lead to a breach of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. Local users with lp privileges can create or overwrite arbitrary files via file race conditions.

Recommendations For versions 1.1.14 through 1.1.17, consider updating to a version outside of this range to mitigate the risk, as no specific fix is provided within the given information. As a temporary workaround, consider restricting access to the lp privileges to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-01804

BDU:2015-01805

BDU:2015-07982

BDU:2015-07983

BDU:2015-07984

BDU:2015-07985

BDU:2015-07986

BDU:2015-07987

CVE-2002-1366

DSA-232

Affected Products

Cups

References · 33

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1384 · Security Note
• https://osv.dev/vulnerability/CVE-2002-1366 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07984 · Security Note
• http://redhat.com/support/errata/RHSA-2002-295.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1368 · Security Note
• https://bdu.fstec.ru/vul/2015-07986 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-1366 · Security Note
• http://debian.org/security/2003/dsa-232 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07985 · Security Note
• https://bdu.fstec.ru/vul/2015-07983 · Security Note
• http://novell.com/linux/security/advisories/2003_002_cups.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1366 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01805 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2002-1366 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1383 · Security Note