PT-2008-2374 · Cyan Soft+1 · Workstation+5
Luigi Auriemma
·
Published
2008-02-13
·
Updated
2018-10-15
·
CVE-2008-0756
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
cyan soft Opium OPI Server versions 4.10.1028 and earlier
cyanPrintIP Easy OPI versions 4.10.1030 and earlier
cyanPrintIP Professional versions 4.10.1030 and earlier
cyanPrintIP Basic versions 4.10.1030 and earlier
Workstation versions 4.10.836 and earlier
Standard versions 4.10.940 and earlier
Description
The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved via a connection that begins with either a "Send queue state" LPD command 3 or a "Send queue state" LPD command 4.
Recommendations
For cyan soft Opium OPI Server versions 4.10.1028 and earlier, update to a version later than 4.10.1028.
For cyanPrintIP Easy OPI versions 4.10.1030 and earlier, update to a version later than 4.10.1030.
For cyanPrintIP Professional versions 4.10.1030 and earlier, update to a version later than 4.10.1030.
For cyanPrintIP Basic versions 4.10.1030 and earlier, update to a version later than 4.10.1030.
For Workstation versions 4.10.836 and earlier, update to a version later than 4.10.836.
For Standard versions 4.10.940 and earlier, update to a version later than 4.10.940.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Zstandard
Workstation
Cyan Soft Opium Opi Server
Cyanprintip Basic
Cyanprintip Easy Opi
Cyanprintip Professional