PT-2003-1079 · Apple · Cups

Paul D. Mitcheson · Published 2003-11-03 · Updated 2017-07-11 · CVE-2003-0788

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 1.1.19

Description The issue is related to the Internet Printing Protocol (IPP) implementation in CUPS, which allows remote attackers to cause a denial of service via certain inputs to the IPP port (TCP 631). This can lead to CPU consumption from a "busy loop". Additionally, there are multiple vulnerabilities in the CUPS package of Red Hat Linux that can be exploited remotely, potentially disrupting the confidentiality, integrity, and availability of protected information.

Recommendations For versions prior to 1.1.19, update to version 1.1.19 or later to resolve the issue. As a temporary workaround, consider restricting access to the IPP port (TCP 631) to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-07983

BDU:2015-07985

BDU:2015-07987

CVE-2003-0788

Affected Products

Cups

References · 18

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000779 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07983 · Security Note
• http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000788 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-275.html · Vendor Advisory
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:104 · Vendor Advisory
• http://securityfocus.com/bid/8952 · Vendor Advisory
• http://turbolinux.com/security/TLSA-2003-63.txt · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0788 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0788 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0788 · Security Note
• https://osv.dev/vulnerability/CVE-2003-0788 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07987 · Security Note
• https://bdu.fstec.ru/vul/2015-07985 · Security Note
• http://secunia.com/advisories/10123 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13584 · Note