Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.
References
| Link | Resource |
|---|---|
| http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html | Broken Link |
| http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 | Broken Link |
| http://marc.info/?l=bugtraq&m=104032149026670&w=2 | Mailing List |
| http://www.debian.org/security/2003/dsa-232 | Third Party Advisory |
| http://www.idefense.com/advisory/12.19.02.txt | Broken Link Exploit Vendor Advisory |
| http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 | Broken Link |
| http://www.novell.com/linux/security/advisories/2003_002_cups.html | Broken Link |
| http://www.redhat.com/support/errata/RHSA-2002-295.html | Broken Link |
| http://www.securityfocus.com/bid/6440 | Broken Link Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/10912 | Third Party Advisory VDB Entry |
Configurations
History
21 Jan 2024, 01:39
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-252 | |
| References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2002-295.html - Broken Link | |
| References | (MISC) http://www.idefense.com/advisory/12.19.02.txt - Broken Link, Exploit, Vendor Advisory | |
| References | (MANDRAKE) http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 - Broken Link | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/10912 - Third Party Advisory, VDB Entry | |
| References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=104032149026670&w=2 - Mailing List | |
| References | (VULNWATCH) http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html - Broken Link | |
| References | (DEBIAN) http://www.debian.org/security/2003/dsa-232 - Third Party Advisory | |
| References | (CONECTIVA) http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 - Broken Link | |
| References | (SUSE) http://www.novell.com/linux/security/advisories/2003_002_cups.html - Broken Link | |
| References | (BID) http://www.securityfocus.com/bid/6440 - Broken Link, Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:* cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:* |
cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:* cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:* |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
Information
Published : 2002-12-26 05:00
Updated : 2024-02-04 16:31
NVD link : CVE-2002-1372
Mitre link : CVE-2002-1372
CVE.ORG link : CVE-2002-1372
JSON object : View
Products Affected
apple
- mac_os_x
- cups
debian
- debian_linux
CWE
CWE-252
Unchecked Return Value