PT-2007-1109 · Suse+2 · Suse Linux+2

Lubomir Kundrak · Published 2007-07-27 · Updated 2020-12-23 · CVE-2007-4045

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CUPS versions prior to 1.3.5 CUPS service as used in SUSE Linux before 20070720

Description: The issue allows remote attackers to cause problems, including a denial of service, via unspecified vectors related to an incomplete fix that introduced a different problem in SSL negotiation. Multiple vulnerabilities in the CUPS package can lead to violations of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations: For CUPS versions prior to 1.3.5, update to version 1.3.5 or later to resolve the issue. For the CUPS service as used in SUSE Linux before 20070720, update to a version released after 20070720 to resolve the issue.

Fix

Related Identifiers

BDU:2015-09592

CVE-2007-4045

RHSA-2007:1022

RHSA-2007:1023

RHSA-2007_1022

Affected Products

Cups

Red Hat

Suse Linux

References · 38

• https://bdu.fstec.ru/vul/2015-04630 · Security Note
• https://bdu.fstec.ru/vul/2015-04629 · Security Note
• https://bdu.fstec.ru/vul/2015-09592 · Security Note
• https://bdu.fstec.ru/vul/2015-06558 · Security Note
• http://novell.com/linux/security/advisories/2007_14_sr.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4045 · Security Note
• https://bdu.fstec.ru/vul/2015-06562 · Security Note
• https://redhat.com/archives/fedora-package-announce/2007-November/msg00238.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-4045 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06560 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-4045 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-4045 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04628 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200712-14.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-1023.html · Vendor Advisory