PT-2010-3386 · Apple+1 · Cups+1

Published 2010-06-17 · Updated 2024-06-15 · CVE-2010-1748

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 1.4.4

Description The issue arises from the improper handling of parameter values containing a % (percent) character without two subsequent hex characters by the cgi initialize string function in the web interface. This allows attackers to obtain sensitive information from cupsd process memory via crafted requests, such as the "/admin?OP=redirect&URL=%" and "/admin?URL=/admin/&OP=%" API endpoints.

Recommendations For versions prior to 1.4.4, update to version 1.4.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the /admin API endpoint to minimize the risk of exploitation. Avoid using the URL and OP parameters in the affected API endpoints until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-1748

DSA-2176-1

OPENSUSE-SU-2024:10075-1

RHSA-2010:0490

RHSA-2010_0490

Affected Products

Cups

Red Hat

References · 43

• 🔥 https://exploit-db.com/exploits/34152 · Exploit
• http://mandriva.com/security/advisories?name=MDVSA-2010:232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1748 · Security Note
• http://securityfocus.com/bid/40871 · Patch
• https://security-tracker.debian.org/tracker/CVE-2010-1748 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-1748 · Vendor Advisory
• http://debian.org/security/2011/dsa-2176 · Vendor Advisory
• http://secunia.com/advisories/40220 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:234 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0535 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html · Vendor Advisory
• http://support.apple.com/kb/HT4188 · Vendor Advisory
• http://vupen.com/english/advisories/2010/1481 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-1748 · Vendor Advisory