OSVDB ID: 12834

Title: CUPS Malformed Traversal HTTP Request Remote DoS

Info

Disclosure

Dec 30, 2004

Discovery

Unknown

Dates

Exploit

Dec 30, 2004

Solution

Unknown

Description

CUPS contains a flaw that may allow a remote denial of service. The issue is triggered when a specially crafted url including /.. is sent to the CUPS server, and will result in loss of availability for the service.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Availability
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

Upgrade to version 1.1.23 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Red Hat, Inc.

Red Hat Enterprise Linux

4
3

Fedora

Core 3

Easy Software Products

CUPS

1.1.21
1.1.22x
1.1.23rc1
1.1.23

References

Credit

  • kmuto -


Direct URL: http://osvdb.org/36218