PT-2002-3149 · Apple · Cups

Published 1970-01-01 · Updated 2025-01-16 · CVE-2002-1372

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions 1.1.14 through 1.1.17

Description The issue is related to multiple vulnerabilities in the CUPS package, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely, potentially causing a denial of service due to resource exhaustion by assigning and not releasing file descriptors.

Recommendations For CUPS versions 1.1.14 through 1.1.17, update to a version that properly checks the return values of file and socket operations to prevent resource exhaustion. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2015-01804

BDU:2015-01805

BDU:2015-07982

BDU:2015-07983

BDU:2015-07984

BDU:2015-07985

BDU:2015-07986

BDU:2015-07987

CVE-2002-1372

DSA-232

Affected Products

Cups

References · 36

• 🔥 http://idefense.com/advisory/12.19.02.txt · Exploit
• https://osv.dev/vulnerability/CVE-2002-1372 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-295.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1366 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1372 · Security Note
• https://bdu.fstec.ru/vul/2015-07982 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-1372 · Security Note
• https://bdu.fstec.ru/vul/2015-07983 · Security Note
• https://bdu.fstec.ru/vul/2015-07986 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1371 · Security Note
• https://bdu.fstec.ru/vul/2015-07984 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1369 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1383 · Security Note
• http://debian.org/security/2003/dsa-232 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01805 · Security Note