PT-2002-3150 · Apple · Cups

Published 1970-01-01 · Updated 2016-10-18 · CVE-2002-1383

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions 1.1.14 through 1.1.17

Description The issue involves multiple integer overflows in the Common Unix Printing System (CUPS), which can be exploited remotely to execute arbitrary code. This can lead to a breach of confidentiality, integrity, and availability of protected information. The exploitation can occur via the CUPSd HTTP interface and the image handling code in CUPS filters.

Recommendations For CUPS versions 1.1.14 through 1.1.17, consider disabling the CUPSd HTTP interface and restricting access to the image handling code in CUPS filters until a patch is available. As a temporary workaround, restrict access to the vulnerable CUPS filters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-01804

BDU:2015-01805

BDU:2015-07982

BDU:2015-07983

BDU:2015-07984

BDU:2015-07985

BDU:2015-07986

BDU:2015-07987

CVE-2002-1383

DSA-232

Affected Products

Cups

References · 39

• 🔥 http://idefense.com/advisory/12.19.02.txt · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1384 · Security Note
• https://bdu.fstec.ru/vul/2015-07984 · Security Note
• http://redhat.com/support/errata/RHSA-2002-295.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1368 · Security Note
• https://bdu.fstec.ru/vul/2015-07986 · Security Note
• ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1383 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07985 · Security Note
• https://bdu.fstec.ru/vul/2015-07983 · Security Note
• https://bdu.fstec.ru/vul/2015-01805 · Security Note
• http://novell.com/linux/security/advisories/2003_002_cups.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1383 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-1383 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1369 · Security Note