The remote host is affected by the vulnerability described in GLSA-201207-10 (CUPS: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in CUPS. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker may be able to execute arbitrary code using specially       crafted streams, IPP requests or files, or cause a Denial of Service       (daemon crash or hang). A local attacker may be able to gain escalated       privileges or overwrite arbitrary files. Furthermore, a remote attacker       may be able to obtain sensitive information from the CUPS process or       hijack a CUPS administrator authentication request.
  Workaround :

    There is no known workaround at this time.

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

[Updated 12th January 2010] The packages list in this erratum has been updated to include missing i386 packages for Red Hat Enterprise Linux Desktop and RHEL Desktop Workstation.

The Common UNIX Printing System (CUPS) provides a portable printing layer for UNIX operating systems.

A use-after-free flaw was found in the way CUPS handled references in its file descriptors-handling interface. A remote attacker could, in a specially crafted way, query for the list of current print jobs for a specific printer, leading to a denial of service (cupsd crash).
(CVE-2009-3553)

Several cross-site scripting (XSS) flaws were found in the way the CUPS web server interface processed HTML form content. If a remote attacker could trick a local user who is logged into the CUPS web interface into visiting a specially crafted HTML page, the attacker could retrieve and potentially modify confidential CUPS administration data. (CVE-2009-2820)

Red Hat would like to thank Aaron Sigel of Apple Product Security for responsibly reporting the CVE-2009-2820 issue.

Users of cups are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, the cupsd daemon will be restarted automatically.

lppasswd when running setuid or setgid still honors environment variables that specify the location of message files. Local attackers could exploit that to gather information by using crafted format strings (CVE-2010-0393).

The previous fix for a use-after-free vulnerability (CVE-2009-3553) was incomplete (CVE-2010-0302).

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0129 advisory.

    [1:1.3.7-11:.6]
    - Applied patch for CVE-2010-0302 (incomplete fix for CVE-2009-3553,       bug #557775).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-004 applied. 

This security update contains fixes for the following components :

  - CUPS
  - DesktopServices
  - Flash Player plug-in
  - Folder Manager
  - iChat
  - ImageIO
  - Kerberos
  - Kernel
  - libcurl
  - Network Authorization
  - Ruby
  - SMB File Server
  - SquirrelMail
  - Wiki Server

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
59902	GLSA-201207-10 : CUPS: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/7/10	2021/1/6	high
42850	RHEL 5 : cups (RHSA-2009:1595)	Nessus	Red Hat Local Security Checks	2009/11/19	2021/1/14	medium
45102	openSUSE Security Update : cups (cups-2102)	Nessus	SuSE Local Security Checks	2010/3/19	2021/1/14	medium
68006	Oracle Linux 5 : cups (ELSA-2010-0129)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
47024	Mac OS X Multiple Vulnerabilities (Security Update 2010-004)	Nessus	MacOS X Local Security Checks	2010/6/15	2024/5/28	high

检测

插件搜索

high

medium

medium

high

high