Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2009-2820 (GCVE-0-2009-2820)
Vulnerability from cvelistv5
Published
2009-11-10 19:00
Modified
2024-08-07 06:07
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-07T06:07:37.571Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.cups.org/str.php?L3367" }, { "name": "1021115", "tags": [ "vendor-advisory", "x_refsource_SUNALERT", "x_transferred" ], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1" }, { "name": "RHSA-2009:1595", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2009-1595.html" }, { "name": "MDVSA-2010:072", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA", "x_transferred" ], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:072" }, { "name": "36956", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/36956" }, { "name": "37308", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/37308" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "name": "37360", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/37360" }, { "name": "MDVSA-2010:073", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA", "x_transferred" ], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073" }, { "name": "oval:org.mitre.oval:def:9153", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.cups.org/documentation.php/relnotes.html" }, { "name": "ADV-2009-3184", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "url": "http://www.vupen.com/english/advisories/2009/3184" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.cups.org/articles.php?L590" }, { "name": "APPLE-SA-2009-11-09-1", "tags": [ "vendor-advisory", "x_refsource_APPLE", "x_transferred" ], "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://support.apple.com/kb/HT3937" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2009-11-09T00:00:00", "descriptions": [ { "lang": "en", "value": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2017-09-18T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.cups.org/str.php?L3367" }, { "name": "1021115", "tags": [ "vendor-advisory", "x_refsource_SUNALERT" ], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1" }, { "name": "RHSA-2009:1595", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2009-1595.html" }, { "name": "MDVSA-2010:072", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA" ], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:072" }, { "name": "36956", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/36956" }, { "name": "37308", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/37308" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "name": "37360", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/37360" }, { "name": "MDVSA-2010:073", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA" ], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073" }, { "name": "oval:org.mitre.oval:def:9153", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.cups.org/documentation.php/relnotes.html" }, { "name": "ADV-2009-3184", "tags": [ "vdb-entry", "x_refsource_VUPEN" ], "url": "http://www.vupen.com/english/advisories/2009/3184" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.cups.org/articles.php?L590" }, { "name": "APPLE-SA-2009-11-09-1", "tags": [ "vendor-advisory", "x_refsource_APPLE" ], "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://support.apple.com/kb/HT3937" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-2820", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://www.cups.org/str.php?L3367", "refsource": "CONFIRM", "url": "http://www.cups.org/str.php?L3367" }, { "name": "1021115", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1" }, { "name": "RHSA-2009:1595", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2009-1595.html" }, { "name": "MDVSA-2010:072", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:072" }, { "name": "36956", "refsource": "BID", "url": "http://www.securityfocus.com/bid/36956" }, { "name": "37308", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37308" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=529833", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "name": "37360", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37360" }, { "name": "MDVSA-2010:073", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073" }, { "name": "oval:org.mitre.oval:def:9153", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153" }, { "name": "http://www.cups.org/documentation.php/relnotes.html", "refsource": "CONFIRM", "url": "http://www.cups.org/documentation.php/relnotes.html" }, { "name": "ADV-2009-3184", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/3184" }, { "name": "http://www.cups.org/articles.php?L590", "refsource": "CONFIRM", "url": "http://www.cups.org/articles.php?L590" }, { "name": "APPLE-SA-2009-11-09-1", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html" }, { "name": "http://support.apple.com/kb/HT3937", "refsource": "CONFIRM", "url": "http://support.apple.com/kb/HT3937" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-2820", "datePublished": "2009-11-10T19:00:00", "dateReserved": "2009-08-17T00:00:00", "dateUpdated": "2024-08-07T06:07:37.571Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2009-2820\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2009-11-10T19:30:01.217\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.\"},{\"lang\":\"es\",\"value\":\"CUPS en Apple Mac OS X anterior a v10.6.2no maneja adecuadamente (1) las cabeceras HTTP y (2) las plantillas HTML, lo que permite a atacantes remotos dirigir ataques de petici\u00f3n de sitios cruzados (XSS) y ataques de separaci\u00f3n de respuesta HTTP a trav\u00e9s de vectores relacionados con (a) la interfaz web del producto, (b) la configuraci\u00f3n del sistema de impresi\u00f3n, y (c) los t\u00edtulos de los trabajos impresos.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"10.6.1\",\"matchCriteriaId\":\"8E61F244-C6E5-48F1-8C18-5A7D862DA638\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99C273D1-ADFE-4B4C-B543-7B9CA741A117\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"399A8984-AADE-4281-A62F-A066D8F450A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"066ABC3B-B395-42D2-95C0-5B810F91A6F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"01BC19FC-6E03-4000-AE4B-232E47FA76F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"734BE71B-82F5-49C6-AB43-F662105D8746\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"421FC2DD-0CF7-44A2-A63C-5221689E2363\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F8B70BC-42B7-453A-B506-7BE69D49A4B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA32F7D8-02F8-4CFE-B193-2888807BC4D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE52A344-8B07-480D-A57F-B1F6E6574F3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"56CC0444-570C-4BB5-B53A-C5CA0BD87935\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62E3EED7-FE30-4620-B40B-9CC49B77408A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7A24978-2891-425C-ACF6-E8F5C839C54A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B20E130-6078-4336-B614-273C27142B46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB461678-560D-436E-A3AE-9E1E16DB0412\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFDADE04-29F0-446B-824B-0518880CF0A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED9BE602-A740-4CF7-9CAF-59061B16AB31\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33E698C1-C313-40E6-BAF9-7C8F9CF02484\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF2D00AC-FA2A-4C39-B796-DC19072862CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"421079DA-B605-4E05-9454-C30CF7631CF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93B734BA-3435-40A9-B22B-5D56CEB865A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30897327-44DD-4D6C-B8B6-2D66C44EA55D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B79D8F73-2E78-4A67-96BB-21AD9BCB0094\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFD4DE58-46C7-4E69-BF36-C5FD768B8248\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF824694-52DE-44E3-ACAD-60B2A84CD3CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B73A0891-A37A-4E0D-AA73-B18BFD6B1447\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C580935-0091-4163-B747-750FB7686973\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB0F2132-8431-4CEF-9A3D-A69425E3834E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8719F3C4-F1DE-49B5-9301-22414A2B6F9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09ED46A8-1739-411C-8807-2A416BDB6DFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"786BB737-EA99-4EC6-B742-0C35BF2453F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D089858-3AF9-4B82-912D-AA33F25E3715\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EE39585-CF3B-4493-96D8-B394544C7643\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2442D35-7484-43D8-9077-3FDF63104816\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC90AA12-DD17-4607-90CB-E342E83F20BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3267A41-1AE0-48B8-BD1F-DEC8A212851A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"855288F1-0242-4951-AB3F-B7AF13E21CF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10082781-B93E-4B84-94F2-FA9749B4D92B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE1EBF04-C440-4A6B-93F2-DC3A812728C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DFB077A2-927B-43AF-BFD5-0E78648C9394\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2398ADC8-A106-462E-B9AE-F8AF800D0A3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1335E35A-D381-4056-9E78-37BC6DF8AD98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFB40DFD-621D-4069-93E2-9EE32411082F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"10.6.1\",\"matchCriteriaId\":\"093B82BC-936B-404D-8F19-DBE4FEB8BB07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB279593-17D1-4A65-BF54-969B38B74B23\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90383DA6-C449-462B-84AD-8DC567D367ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D846700-3355-42CA-B15E-7F08F935F2B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3891C974-DBDE-42AD-ADBA-C8689D0D055D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A6CE48E-FB74-4F49-911D-936B09677753\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ADAB244E-0391-49E9-B36B-A7CB34CF7152\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F5B731-D5A7-4694-9B27-CEE1DCC810EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA38FB0C-3959-4C5A-B06D-39B2A340A173\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36F4618C-1408-4097-B97D-5F32DE6D01DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F558C40-D0DA-4700-95DA-DF1322C020E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"64F8F30B-E4B8-4745-AFFA-8FD620E61994\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00AE033B-5F16-4262-A397-02D7450189B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02B8266D-69BB-417D-A776-DB9CF58A4C67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E831F3E-A980-47AF-BD05-2DB1A14689B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36991737-904F-4B26-AEE2-7B30411279E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7EE6036-1A18-43F1-8A92-7DF39E1516E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"620ECFC8-293D-4C2B-9698-67185BB6E2EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C1F14A45-BDDB-4C12-9370-D5241975A928\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46BC34D4-A1E8-4E01-982D-EAF03A0EB886\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"35932546-B614-47C0-98E6-8EF1EFE06725\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38F17066-C090-4DD7-A1AC-D8FF70D268CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E997653-C744-4F1F-9948-47579AB3BED3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81F060C7-AC9E-4844-A430-14B3DFC90E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"384C130F-D1A9-4482-AF20-FC81933473A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CA6BD2A-3022-408D-8E4F-50865996E965\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"463D5628-7536-4029-99D6-5E525050059E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69A39B11-1C23-4A6C-B4C5-AEC40836F173\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78D48FD1-CB91-4310-9432-A4365FA67B11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"750C6C37-8460-4ED8-83AD-ACAF993E4A6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8923EE1A-DD48-4EC8-8698-A33093FD709C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F60BF582-F700-4E26-A4AF-5BF657803525\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29644501-54BD-45E9-A6C1-618892CD354F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A132487-E89F-4D0D-8366-14AFC904811F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD231103-D7C7-4697-BE90-D67558D6115C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCADAAA0-C885-466C-A122-A94E73EAF817\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BE429EF-24D4-453A-8B43-8CCEF5D72773\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8AC9692A-CE81-446D-B136-449662C4B9A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"504D78AB-5374-48C9-B357-DB6BD2267D2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3029892E-1375-4F40-83D3-A51BDC4E9840\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81F8DA6D-2258-4138-8FB2-90BE3C68B230\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"20E8648C-5469-4280-A581-D4A9A41B7213\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7817232-BE3E-4655-8282-A979E5D40D3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77E8D614-E1EE-42F1-9E55-EA54FB500621\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C73BED9E-29FB-4965-B38F-013FFE5A9170\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C147E866-B80F-4FFA-BBE8-19E84A46DB1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ADF94705-562C-4EC8-993E-1AD88F01549C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"82B4CD59-9F37-4EF0-BA43-427CFD6E1329\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8750269D-DF74-4DE5-AA08-BD2B13445F0B\"}]}]}],\"references\":[{\"url\":\"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/37308\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/37360\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://support.apple.com/kb/HT3937\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.cups.org/articles.php?L590\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.cups.org/documentation.php/relnotes.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.cups.org/str.php?L3367\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:072\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:073\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-1595.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/36956\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/3184\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=529833\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/37308\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/37360\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.apple.com/kb/HT3937\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.cups.org/articles.php?L590\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.cups.org/documentation.php/relnotes.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.cups.org/str.php?L3367\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:072\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2010:073\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-1595.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/36956\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/3184\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=529833\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
gsd-2009-2820
Vulnerability from gsd
Modified
2023-12-13 01:19
Details
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2009-2820", "description": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.", "id": "GSD-2009-2820", "references": [ "https://www.suse.com/security/cve/CVE-2009-2820.html", "https://www.debian.org/security/2009/dsa-1933", "https://access.redhat.com/errata/RHSA-2009:1595", "https://linux.oracle.com/cve/CVE-2009-2820.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2009-2820" ], "details": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.", "id": "GSD-2009-2820", "modified": "2023-12-13T01:19:46.973622Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-2820", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://www.cups.org/str.php?L3367", "refsource": "CONFIRM", "url": "http://www.cups.org/str.php?L3367" }, { "name": "1021115", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1" }, { "name": "RHSA-2009:1595", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2009-1595.html" }, { "name": "MDVSA-2010:072", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:072" }, { "name": "36956", "refsource": "BID", "url": "http://www.securityfocus.com/bid/36956" }, { "name": "37308", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37308" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=529833", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "name": "37360", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37360" }, { "name": "MDVSA-2010:073", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073" }, { "name": "oval:org.mitre.oval:def:9153", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153" }, { "name": "http://www.cups.org/documentation.php/relnotes.html", "refsource": "CONFIRM", "url": "http://www.cups.org/documentation.php/relnotes.html" }, { "name": "ADV-2009-3184", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/3184" }, { "name": "http://www.cups.org/articles.php?L590", "refsource": "CONFIRM", "url": "http://www.cups.org/articles.php?L590" }, { "name": "APPLE-SA-2009-11-09-1", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html" }, { "name": "http://support.apple.com/kb/HT3937", "refsource": "CONFIRM", "url": "http://support.apple.com/kb/HT3937" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "10.6.1", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "10.6.1", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-2820" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-79" } ] } ] }, "references": { "reference_data": [ { "name": "http://support.apple.com/kb/HT3937", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://support.apple.com/kb/HT3937" }, { "name": "APPLE-SA-2009-11-09-1", "refsource": "APPLE", "tags": [ "Vendor Advisory" ], "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html" }, { "name": "36956", "refsource": "BID", "tags": [ "Patch" ], "url": "http://www.securityfocus.com/bid/36956" }, { "name": "ADV-2009-3184", "refsource": "VUPEN", "tags": [], "url": "http://www.vupen.com/english/advisories/2009/3184" }, { "name": "http://www.cups.org/documentation.php/relnotes.html", "refsource": "CONFIRM", "tags": [], "url": "http://www.cups.org/documentation.php/relnotes.html" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=529833", "refsource": "CONFIRM", "tags": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "name": "37360", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/37360" }, { "name": "RHSA-2009:1595", "refsource": "REDHAT", "tags": [], "url": "http://www.redhat.com/support/errata/RHSA-2009-1595.html" }, { "name": "37308", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/37308" }, { "name": "http://www.cups.org/articles.php?L590", "refsource": "CONFIRM", "tags": [], "url": "http://www.cups.org/articles.php?L590" }, { "name": "http://www.cups.org/str.php?L3367", "refsource": "CONFIRM", "tags": [], "url": "http://www.cups.org/str.php?L3367" }, { "name": "MDVSA-2010:072", "refsource": "MANDRIVA", "tags": [], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:072" }, { "name": "MDVSA-2010:073", "refsource": "MANDRIVA", "tags": [], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073" }, { "name": "1021115", "refsource": "SUNALERT", "tags": [], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1" }, { "name": "oval:org.mitre.oval:def:9153", "refsource": "OVAL", "tags": [], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true } }, "lastModifiedDate": "2017-09-19T01:29Z", "publishedDate": "2009-11-10T19:30Z" } } }
ghsa-hmf5-7mhf-fpjh
Vulnerability from github
Published
2022-05-02 03:38
Modified
2022-05-02 03:38
VLAI Severity ?
Details
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
{ "affected": [], "aliases": [ "CVE-2009-2820" ], "database_specific": { "cwe_ids": [ "CWE-79" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2009-11-10T19:30:00Z", "severity": "MODERATE" }, "details": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.", "id": "GHSA-hmf5-7mhf-fpjh", "modified": "2022-05-02T03:38:55Z", "published": "2022-05-02T03:38:55Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2820" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/37308" }, { "type": "WEB", "url": "http://secunia.com/advisories/37360" }, { "type": "WEB", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT3937" }, { "type": "WEB", "url": "http://www.cups.org/articles.php?L590" }, { "type": "WEB", "url": "http://www.cups.org/documentation.php/relnotes.html" }, { "type": "WEB", "url": "http://www.cups.org/str.php?L3367" }, { "type": "WEB", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:072" }, { "type": "WEB", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2009-1595.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/36956" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2009/3184" } ], "schema_version": "1.4.0", "severity": [] }
rhsa-2009:1595
Vulnerability from csaf_redhat
Published
2009-11-18 12:47
Modified
2024-11-22 03:07
Summary
Red Hat Security Advisory: cups security update
Notes
Topic
Updated cups packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 5.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
[Updated 12th January 2010]
The packages list in this erratum has been updated to include missing i386
packages for Red Hat Enterprise Linux Desktop and RHEL Desktop Workstation.
Details
The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX operating systems.
A use-after-free flaw was found in the way CUPS handled references in its
file descriptors-handling interface. A remote attacker could, in a
specially-crafted way, query for the list of current print jobs for a
specific printer, leading to a denial of service (cupsd crash).
(CVE-2009-3553)
Several cross-site scripting (XSS) flaws were found in the way the CUPS web
server interface processed HTML form content. If a remote attacker could
trick a local user who is logged into the CUPS web interface into visiting
a specially-crafted HTML page, the attacker could retrieve and potentially
modify confidential CUPS administration data. (CVE-2009-2820)
Red Hat would like to thank Aaron Sigel of Apple Product Security for
responsibly reporting the CVE-2009-2820 issue.
Users of cups are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. After installing the
update, the cupsd daemon will be restarted automatically.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated cups packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.\n\n[Updated 12th January 2010]\nThe packages list in this erratum has been updated to include missing i386\npackages for Red Hat Enterprise Linux Desktop and RHEL Desktop Workstation.", "title": "Topic" }, { "category": "general", "text": "The Common UNIX Printing System (CUPS) provides a portable printing layer\nfor UNIX operating systems.\n\nA use-after-free flaw was found in the way CUPS handled references in its\nfile descriptors-handling interface. A remote attacker could, in a\nspecially-crafted way, query for the list of current print jobs for a\nspecific printer, leading to a denial of service (cupsd crash).\n(CVE-2009-3553)\n\nSeveral cross-site scripting (XSS) flaws were found in the way the CUPS web\nserver interface processed HTML form content. If a remote attacker could\ntrick a local user who is logged into the CUPS web interface into visiting\na specially-crafted HTML page, the attacker could retrieve and potentially\nmodify confidential CUPS administration data. (CVE-2009-2820)\n\nRed Hat would like to thank Aaron Sigel of Apple Product Security for\nresponsibly reporting the CVE-2009-2820 issue.\n\nUsers of cups are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. After installing the\nupdate, the cupsd daemon will be restarted automatically.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2009:1595", "url": "https://access.redhat.com/errata/RHSA-2009:1595" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "529833", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "category": "external", "summary": "530111", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530111" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1595.json" } ], "title": "Red Hat Security Advisory: cups security update", "tracking": { "current_release_date": "2024-11-22T03:07:50+00:00", "generator": { "date": "2024-11-22T03:07:50+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2009:1595", "initial_release_date": "2009-11-18T12:47:00+00:00", "revision_history": [ { "date": "2009-11-18T12:47:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2010-01-12T11:21:19+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T03:07:50+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product": { "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux (v. 5 server)", "product": { "name": "Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "cups-1:1.3.7-11.el5_4.4.src", "product": { "name": "cups-1:1.3.7-11.el5_4.4.src", "product_id": "cups-1:1.3.7-11.el5_4.4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups@1.3.7-11.el5_4.4?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "product": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "product_id": "cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-debuginfo@1.3.7-11.el5_4.4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-devel-1:1.3.7-11.el5_4.4.x86_64", "product": { "name": "cups-devel-1:1.3.7-11.el5_4.4.x86_64", "product_id": "cups-devel-1:1.3.7-11.el5_4.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-devel@1.3.7-11.el5_4.4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-1:1.3.7-11.el5_4.4.x86_64", "product": { "name": "cups-1:1.3.7-11.el5_4.4.x86_64", "product_id": "cups-1:1.3.7-11.el5_4.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups@1.3.7-11.el5_4.4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "product": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "product_id": "cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-lpd@1.3.7-11.el5_4.4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.3.7-11.el5_4.4.x86_64", "product": { "name": "cups-libs-1:1.3.7-11.el5_4.4.x86_64", "product_id": "cups-libs-1:1.3.7-11.el5_4.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-libs@1.3.7-11.el5_4.4?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "product": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "product_id": "cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-debuginfo@1.3.7-11.el5_4.4?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-devel-1:1.3.7-11.el5_4.4.i386", "product": { "name": "cups-devel-1:1.3.7-11.el5_4.4.i386", "product_id": "cups-devel-1:1.3.7-11.el5_4.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-devel@1.3.7-11.el5_4.4?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.3.7-11.el5_4.4.i386", "product": { "name": "cups-libs-1:1.3.7-11.el5_4.4.i386", "product_id": "cups-libs-1:1.3.7-11.el5_4.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-libs@1.3.7-11.el5_4.4?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-1:1.3.7-11.el5_4.4.i386", "product": { "name": "cups-1:1.3.7-11.el5_4.4.i386", "product_id": "cups-1:1.3.7-11.el5_4.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups@1.3.7-11.el5_4.4?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-lpd-1:1.3.7-11.el5_4.4.i386", "product": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.i386", "product_id": "cups-lpd-1:1.3.7-11.el5_4.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-lpd@1.3.7-11.el5_4.4?arch=i386\u0026epoch=1" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "cups-1:1.3.7-11.el5_4.4.ia64", "product": { "name": "cups-1:1.3.7-11.el5_4.4.ia64", "product_id": "cups-1:1.3.7-11.el5_4.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups@1.3.7-11.el5_4.4?arch=ia64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-lpd-1:1.3.7-11.el5_4.4.ia64", "product": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.ia64", "product_id": "cups-lpd-1:1.3.7-11.el5_4.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-lpd@1.3.7-11.el5_4.4?arch=ia64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.3.7-11.el5_4.4.ia64", "product": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ia64", "product_id": "cups-libs-1:1.3.7-11.el5_4.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-libs@1.3.7-11.el5_4.4?arch=ia64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "product": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "product_id": "cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-debuginfo@1.3.7-11.el5_4.4?arch=ia64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-devel-1:1.3.7-11.el5_4.4.ia64", "product": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ia64", "product_id": "cups-devel-1:1.3.7-11.el5_4.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-devel@1.3.7-11.el5_4.4?arch=ia64\u0026epoch=1" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "cups-1:1.3.7-11.el5_4.4.ppc", "product": { "name": "cups-1:1.3.7-11.el5_4.4.ppc", "product_id": "cups-1:1.3.7-11.el5_4.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups@1.3.7-11.el5_4.4?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-lpd-1:1.3.7-11.el5_4.4.ppc", "product": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.ppc", "product_id": "cups-lpd-1:1.3.7-11.el5_4.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-lpd@1.3.7-11.el5_4.4?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc", "product": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc", "product_id": "cups-libs-1:1.3.7-11.el5_4.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-libs@1.3.7-11.el5_4.4?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "product": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "product_id": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-debuginfo@1.3.7-11.el5_4.4?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc", "product": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc", "product_id": "cups-devel-1:1.3.7-11.el5_4.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-devel@1.3.7-11.el5_4.4?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc64", "product": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc64", "product_id": "cups-libs-1:1.3.7-11.el5_4.4.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-libs@1.3.7-11.el5_4.4?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "product": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "product_id": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-debuginfo@1.3.7-11.el5_4.4?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc64", "product": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc64", "product_id": "cups-devel-1:1.3.7-11.el5_4.4.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-devel@1.3.7-11.el5_4.4?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "cups-1:1.3.7-11.el5_4.4.s390x", "product": { "name": "cups-1:1.3.7-11.el5_4.4.s390x", "product_id": "cups-1:1.3.7-11.el5_4.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups@1.3.7-11.el5_4.4?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-lpd-1:1.3.7-11.el5_4.4.s390x", "product": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.s390x", "product_id": "cups-lpd-1:1.3.7-11.el5_4.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-lpd@1.3.7-11.el5_4.4?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-libs-1:1.3.7-11.el5_4.4.s390x", "product": { "name": "cups-libs-1:1.3.7-11.el5_4.4.s390x", "product_id": "cups-libs-1:1.3.7-11.el5_4.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-libs@1.3.7-11.el5_4.4?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "product": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "product_id": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-debuginfo@1.3.7-11.el5_4.4?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-devel-1:1.3.7-11.el5_4.4.s390x", "product": { "name": "cups-devel-1:1.3.7-11.el5_4.4.s390x", "product_id": "cups-devel-1:1.3.7-11.el5_4.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-devel@1.3.7-11.el5_4.4?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "cups-libs-1:1.3.7-11.el5_4.4.s390", "product": { "name": "cups-libs-1:1.3.7-11.el5_4.4.s390", "product_id": "cups-libs-1:1.3.7-11.el5_4.4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-libs@1.3.7-11.el5_4.4?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "product": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "product_id": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-debuginfo@1.3.7-11.el5_4.4?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "cups-devel-1:1.3.7-11.el5_4.4.s390", "product": { "name": "cups-devel-1:1.3.7-11.el5_4.4.s390", "product_id": "cups-devel-1:1.3.7-11.el5_4.4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/cups-devel@1.3.7-11.el5_4.4?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.src" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.src", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc64" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.ppc64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.s390", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc64" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.ppc64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.s390", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-1:1.3.7-11.el5_4.4.src" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.src", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-devel-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-devel-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc64" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.ppc64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.s390", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-devel-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-libs-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-libs-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc64" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.ppc64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.s390", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-libs-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-lpd-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-lpd-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:cups-lpd-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.src as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-1:1.3.7-11.el5_4.4.src" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.src", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-devel-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-devel-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc64" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.ppc64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.s390", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-devel-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-devel-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-libs-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-libs-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc64" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.ppc64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.s390", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-libs-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-libs-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-lpd-1:1.3.7-11.el5_4.4.i386" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ia64" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ppc" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-lpd-1:1.3.7-11.el5_4.4.s390x" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "cups-lpd-1:1.3.7-11.el5_4.4.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:cups-lpd-1:1.3.7-11.el5_4.4.x86_64" }, "product_reference": "cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "relates_to_product_reference": "5Server" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Aaron Sigel" ], "organization": "Apple Product Security" } ], "cve": "CVE-2009-2820", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2009-10-19T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "529833" } ], "notes": [ { "category": "description", "text": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.", "title": "Vulnerability description" }, { "category": "summary", "text": "cups: Several XSS flaws in forms processed by CUPS web interface", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.src", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-1:1.3.7-11.el5_4.4.i386", "5Client:cups-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-1:1.3.7-11.el5_4.4.src", "5Client:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-1:1.3.7-11.el5_4.4.i386", "5Server:cups-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-1:1.3.7-11.el5_4.4.src", "5Server:cups-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-2820" }, { "category": "external", "summary": "RHBZ#529833", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2820", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2820" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2820", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2820" } ], "release_date": "2009-11-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-11-18T12:47:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.src", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-1:1.3.7-11.el5_4.4.i386", "5Client:cups-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-1:1.3.7-11.el5_4.4.src", "5Client:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-1:1.3.7-11.el5_4.4.i386", "5Server:cups-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-1:1.3.7-11.el5_4.4.src", "5Server:cups-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1595" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.src", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-1:1.3.7-11.el5_4.4.i386", "5Client:cups-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-1:1.3.7-11.el5_4.4.src", "5Client:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-1:1.3.7-11.el5_4.4.i386", "5Server:cups-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-1:1.3.7-11.el5_4.4.src", "5Server:cups-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "cups: Several XSS flaws in forms processed by CUPS web interface" }, { "cve": "CVE-2009-3553", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2009-06-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "530111" } ], "notes": [ { "category": "description", "text": "Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.", "title": "Vulnerability description" }, { "category": "summary", "text": "cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.src", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-1:1.3.7-11.el5_4.4.i386", "5Client:cups-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-1:1.3.7-11.el5_4.4.src", "5Client:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-1:1.3.7-11.el5_4.4.i386", "5Server:cups-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-1:1.3.7-11.el5_4.4.src", "5Server:cups-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-3553" }, { "category": "external", "summary": "RHBZ#530111", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530111" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3553", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3553" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3553", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3553" } ], "release_date": "2009-05-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2009-11-18T12:47:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.src", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-1:1.3.7-11.el5_4.4.i386", "5Client:cups-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-1:1.3.7-11.el5_4.4.src", "5Client:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-1:1.3.7-11.el5_4.4.i386", "5Server:cups-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-1:1.3.7-11.el5_4.4.src", "5Server:cups-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2009:1595" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 3.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.src", "5Client-Workstation:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client-Workstation:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-1:1.3.7-11.el5_4.4.i386", "5Client:cups-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-1:1.3.7-11.el5_4.4.src", "5Client:cups-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Client:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Client:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Client:cups-lpd-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-1:1.3.7-11.el5_4.4.i386", "5Server:cups-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-1:1.3.7-11.el5_4.4.src", "5Server:cups-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.i386", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-debuginfo-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.i386", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-devel-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390", "5Server:cups-devel-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-devel-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.i386", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-libs-1:1.3.7-11.el5_4.4.ppc64", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390", "5Server:cups-libs-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-libs-1:1.3.7-11.el5_4.4.x86_64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.i386", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ia64", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.ppc", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.s390x", "5Server:cups-lpd-1:1.3.7-11.el5_4.4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface" } ] }
opensuse-su-2024:10075-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
cups-2.1.3-2.3 on GA media
Notes
Title of the patch
cups-2.1.3-2.3 on GA media
Description of the patch
These are all security issues fixed in the cups-2.1.3-2.3 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10075
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "cups-2.1.3-2.3 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the cups-2.1.3-2.3 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10075", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10075-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2009-0163 page", "url": "https://www.suse.com/security/cve/CVE-2009-0163/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-2820 page", "url": "https://www.suse.com/security/cve/CVE-2009-2820/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-3553 page", "url": "https://www.suse.com/security/cve/CVE-2009-3553/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-0393 page", "url": "https://www.suse.com/security/cve/CVE-2010-0393/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-0540 page", "url": "https://www.suse.com/security/cve/CVE-2010-0540/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-0542 page", "url": "https://www.suse.com/security/cve/CVE-2010-0542/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-1748 page", "url": "https://www.suse.com/security/cve/CVE-2010-1748/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-2941 page", "url": "https://www.suse.com/security/cve/CVE-2010-2941/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5519 page", "url": "https://www.suse.com/security/cve/CVE-2012-5519/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-6094 page", "url": "https://www.suse.com/security/cve/CVE-2012-6094/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2856 page", "url": "https://www.suse.com/security/cve/CVE-2014-2856/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3537 page", "url": "https://www.suse.com/security/cve/CVE-2014-3537/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-5029 page", "url": "https://www.suse.com/security/cve/CVE-2014-5029/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-5030 page", "url": "https://www.suse.com/security/cve/CVE-2014-5030/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-5031 page", "url": "https://www.suse.com/security/cve/CVE-2014-5031/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1158 page", "url": "https://www.suse.com/security/cve/CVE-2015-1158/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1159 page", "url": "https://www.suse.com/security/cve/CVE-2015-1159/" } ], "title": "cups-2.1.3-2.3 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10075-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "cups-2.1.3-2.3.aarch64", "product": { "name": "cups-2.1.3-2.3.aarch64", "product_id": "cups-2.1.3-2.3.aarch64" } }, { "category": "product_version", "name": "cups-client-2.1.3-2.3.aarch64", "product": { "name": "cups-client-2.1.3-2.3.aarch64", "product_id": "cups-client-2.1.3-2.3.aarch64" } }, { "category": "product_version", "name": "cups-ddk-2.1.3-2.3.aarch64", "product": { "name": "cups-ddk-2.1.3-2.3.aarch64", "product_id": "cups-ddk-2.1.3-2.3.aarch64" } }, { "category": "product_version", "name": "cups-devel-2.1.3-2.3.aarch64", "product": { "name": "cups-devel-2.1.3-2.3.aarch64", "product_id": "cups-devel-2.1.3-2.3.aarch64" } }, { "category": "product_version", "name": "cups-devel-32bit-2.1.3-2.3.aarch64", "product": { "name": "cups-devel-32bit-2.1.3-2.3.aarch64", "product_id": "cups-devel-32bit-2.1.3-2.3.aarch64" } }, { "category": "product_version", "name": "cups-libs-2.1.3-2.3.aarch64", "product": { "name": "cups-libs-2.1.3-2.3.aarch64", "product_id": "cups-libs-2.1.3-2.3.aarch64" } }, { "category": "product_version", "name": "cups-libs-32bit-2.1.3-2.3.aarch64", "product": { "name": "cups-libs-32bit-2.1.3-2.3.aarch64", "product_id": "cups-libs-32bit-2.1.3-2.3.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "cups-2.1.3-2.3.ppc64le", "product": { "name": "cups-2.1.3-2.3.ppc64le", "product_id": "cups-2.1.3-2.3.ppc64le" } }, { "category": "product_version", "name": "cups-client-2.1.3-2.3.ppc64le", "product": { "name": "cups-client-2.1.3-2.3.ppc64le", "product_id": "cups-client-2.1.3-2.3.ppc64le" } }, { "category": "product_version", "name": "cups-ddk-2.1.3-2.3.ppc64le", "product": { "name": "cups-ddk-2.1.3-2.3.ppc64le", "product_id": "cups-ddk-2.1.3-2.3.ppc64le" } }, { "category": "product_version", "name": "cups-devel-2.1.3-2.3.ppc64le", "product": { "name": "cups-devel-2.1.3-2.3.ppc64le", "product_id": "cups-devel-2.1.3-2.3.ppc64le" } }, { "category": "product_version", "name": "cups-devel-32bit-2.1.3-2.3.ppc64le", "product": { "name": "cups-devel-32bit-2.1.3-2.3.ppc64le", "product_id": "cups-devel-32bit-2.1.3-2.3.ppc64le" } }, { "category": "product_version", "name": "cups-libs-2.1.3-2.3.ppc64le", "product": { "name": "cups-libs-2.1.3-2.3.ppc64le", "product_id": "cups-libs-2.1.3-2.3.ppc64le" } }, { "category": "product_version", "name": "cups-libs-32bit-2.1.3-2.3.ppc64le", "product": { "name": "cups-libs-32bit-2.1.3-2.3.ppc64le", "product_id": "cups-libs-32bit-2.1.3-2.3.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "cups-2.1.3-2.3.s390x", "product": { "name": "cups-2.1.3-2.3.s390x", "product_id": "cups-2.1.3-2.3.s390x" } }, { "category": "product_version", "name": "cups-client-2.1.3-2.3.s390x", "product": { "name": "cups-client-2.1.3-2.3.s390x", "product_id": "cups-client-2.1.3-2.3.s390x" } }, { "category": "product_version", "name": "cups-ddk-2.1.3-2.3.s390x", "product": { "name": "cups-ddk-2.1.3-2.3.s390x", "product_id": "cups-ddk-2.1.3-2.3.s390x" } }, { "category": "product_version", "name": "cups-devel-2.1.3-2.3.s390x", "product": { "name": "cups-devel-2.1.3-2.3.s390x", "product_id": "cups-devel-2.1.3-2.3.s390x" } }, { "category": "product_version", "name": "cups-devel-32bit-2.1.3-2.3.s390x", "product": { "name": "cups-devel-32bit-2.1.3-2.3.s390x", "product_id": "cups-devel-32bit-2.1.3-2.3.s390x" } }, { "category": "product_version", "name": "cups-libs-2.1.3-2.3.s390x", "product": { "name": "cups-libs-2.1.3-2.3.s390x", "product_id": "cups-libs-2.1.3-2.3.s390x" } }, { "category": "product_version", "name": "cups-libs-32bit-2.1.3-2.3.s390x", "product": { "name": "cups-libs-32bit-2.1.3-2.3.s390x", "product_id": "cups-libs-32bit-2.1.3-2.3.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "cups-2.1.3-2.3.x86_64", "product": { "name": "cups-2.1.3-2.3.x86_64", "product_id": "cups-2.1.3-2.3.x86_64" } }, { "category": "product_version", "name": "cups-client-2.1.3-2.3.x86_64", "product": { "name": "cups-client-2.1.3-2.3.x86_64", "product_id": "cups-client-2.1.3-2.3.x86_64" } }, { "category": "product_version", "name": "cups-ddk-2.1.3-2.3.x86_64", "product": { "name": "cups-ddk-2.1.3-2.3.x86_64", "product_id": "cups-ddk-2.1.3-2.3.x86_64" } }, { "category": "product_version", "name": "cups-devel-2.1.3-2.3.x86_64", "product": { "name": "cups-devel-2.1.3-2.3.x86_64", "product_id": "cups-devel-2.1.3-2.3.x86_64" } }, { "category": "product_version", "name": "cups-devel-32bit-2.1.3-2.3.x86_64", "product": { "name": "cups-devel-32bit-2.1.3-2.3.x86_64", "product_id": "cups-devel-32bit-2.1.3-2.3.x86_64" } }, { "category": "product_version", "name": "cups-libs-2.1.3-2.3.x86_64", "product": { "name": "cups-libs-2.1.3-2.3.x86_64", "product_id": "cups-libs-2.1.3-2.3.x86_64" } }, { "category": "product_version", "name": "cups-libs-32bit-2.1.3-2.3.x86_64", "product": { "name": "cups-libs-32bit-2.1.3-2.3.x86_64", "product_id": "cups-libs-32bit-2.1.3-2.3.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "cups-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64" }, "product_reference": "cups-2.1.3-2.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le" }, "product_reference": "cups-2.1.3-2.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-2.1.3-2.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x" }, "product_reference": "cups-2.1.3-2.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64" }, "product_reference": "cups-2.1.3-2.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-client-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64" }, "product_reference": "cups-client-2.1.3-2.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-client-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le" }, "product_reference": "cups-client-2.1.3-2.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-client-2.1.3-2.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x" }, "product_reference": "cups-client-2.1.3-2.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-client-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64" }, "product_reference": "cups-client-2.1.3-2.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-ddk-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64" }, "product_reference": "cups-ddk-2.1.3-2.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-ddk-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le" }, "product_reference": "cups-ddk-2.1.3-2.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-ddk-2.1.3-2.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x" }, "product_reference": "cups-ddk-2.1.3-2.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-ddk-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64" }, "product_reference": "cups-ddk-2.1.3-2.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64" }, "product_reference": "cups-devel-2.1.3-2.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le" }, "product_reference": "cups-devel-2.1.3-2.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-2.1.3-2.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x" }, "product_reference": "cups-devel-2.1.3-2.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64" }, "product_reference": "cups-devel-2.1.3-2.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-32bit-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64" }, "product_reference": "cups-devel-32bit-2.1.3-2.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-32bit-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le" }, "product_reference": "cups-devel-32bit-2.1.3-2.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-32bit-2.1.3-2.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x" }, "product_reference": "cups-devel-32bit-2.1.3-2.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-devel-32bit-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64" }, "product_reference": "cups-devel-32bit-2.1.3-2.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64" }, "product_reference": "cups-libs-2.1.3-2.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le" }, "product_reference": "cups-libs-2.1.3-2.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-2.1.3-2.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x" }, "product_reference": "cups-libs-2.1.3-2.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64" }, "product_reference": "cups-libs-2.1.3-2.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-32bit-2.1.3-2.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64" }, "product_reference": "cups-libs-32bit-2.1.3-2.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-32bit-2.1.3-2.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le" }, "product_reference": "cups-libs-32bit-2.1.3-2.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-32bit-2.1.3-2.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x" }, "product_reference": "cups-libs-32bit-2.1.3-2.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "cups-libs-32bit-2.1.3-2.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" }, "product_reference": "cups-libs-32bit-2.1.3-2.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-0163", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-0163" } ], "notes": [ { "category": "general", "text": "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-0163", "url": "https://www.suse.com/security/cve/CVE-2009-0163" }, { "category": "external", "summary": "SUSE Bug 485895 for CVE-2009-0163", "url": "https://bugzilla.suse.com/485895" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2009-0163" }, { "cve": "CVE-2009-2820", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-2820" } ], "notes": [ { "category": "general", "text": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-2820", "url": "https://www.suse.com/security/cve/CVE-2009-2820" }, { "category": "external", "summary": "SUSE Bug 548317 for CVE-2009-2820", "url": "https://bugzilla.suse.com/548317" }, { "category": "external", "summary": "SUSE Bug 551563 for CVE-2009-2820", "url": "https://bugzilla.suse.com/551563" }, { "category": "external", "summary": "SUSE Bug 574336 for CVE-2009-2820", "url": "https://bugzilla.suse.com/574336" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2009-2820" }, { "cve": "CVE-2009-3553", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-3553" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-3553", "url": "https://www.suse.com/security/cve/CVE-2009-3553" }, { "category": "external", "summary": "SUSE Bug 554861 for CVE-2009-3553", "url": "https://bugzilla.suse.com/554861" }, { "category": "external", "summary": "SUSE Bug 574336 for CVE-2009-3553", "url": "https://bugzilla.suse.com/574336" }, { "category": "external", "summary": "SUSE Bug 578215 for CVE-2009-3553", "url": "https://bugzilla.suse.com/578215" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2009-3553" }, { "cve": "CVE-2010-0393", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-0393" } ], "notes": [ { "category": "general", "text": "The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-0393", "url": "https://www.suse.com/security/cve/CVE-2010-0393" }, { "category": "external", "summary": "SUSE Bug 574336 for CVE-2010-0393", "url": "https://bugzilla.suse.com/574336" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2010-0393" }, { "cve": "CVE-2010-0540", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-0540" } ], "notes": [ { "category": "general", "text": "Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-0540", "url": "https://www.suse.com/security/cve/CVE-2010-0540" }, { "category": "external", "summary": "SUSE Bug 601830 for CVE-2010-0540", "url": "https://bugzilla.suse.com/601830" }, { "category": "external", "summary": "SUSE Bug 671735 for CVE-2010-0540", "url": "https://bugzilla.suse.com/671735" }, { "category": "external", "summary": "SUSE Bug 680210 for CVE-2010-0540", "url": "https://bugzilla.suse.com/680210" }, { "category": "external", "summary": "SUSE Bug 680212 for CVE-2010-0540", "url": "https://bugzilla.suse.com/680212" }, { "category": "external", "summary": "SUSE Bug 700987 for CVE-2010-0540", "url": "https://bugzilla.suse.com/700987" }, { "category": "external", "summary": "SUSE Bug 711490 for CVE-2010-0540", "url": "https://bugzilla.suse.com/711490" }, { "category": "external", "summary": "SUSE Bug 715643 for CVE-2010-0540", "url": "https://bugzilla.suse.com/715643" }, { "category": "external", "summary": "SUSE Bug 748422 for CVE-2010-0540", "url": "https://bugzilla.suse.com/748422" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2010-0540" }, { "cve": "CVE-2010-0542", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-0542" } ], "notes": [ { "category": "general", "text": "The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-0542", "url": "https://www.suse.com/security/cve/CVE-2010-0542" }, { "category": "external", "summary": "SUSE Bug 601352 for CVE-2010-0542", "url": "https://bugzilla.suse.com/601352" }, { "category": "external", "summary": "SUSE Bug 644521 for CVE-2010-0542", "url": "https://bugzilla.suse.com/644521" }, { "category": "external", "summary": "SUSE Bug 657780 for CVE-2010-0542", "url": "https://bugzilla.suse.com/657780" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2010-0542" }, { "cve": "CVE-2010-1748", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-1748" } ], "notes": [ { "category": "general", "text": "The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect\u0026URL=% and (2) /admin?URL=/admin/\u0026OP=% URIs.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-1748", "url": "https://www.suse.com/security/cve/CVE-2010-1748" }, { "category": "external", "summary": "SUSE Bug 601352 for CVE-2010-1748", "url": "https://bugzilla.suse.com/601352" }, { "category": "external", "summary": "SUSE Bug 604271 for CVE-2010-1748", "url": "https://bugzilla.suse.com/604271" }, { "category": "external", "summary": "SUSE Bug 644521 for CVE-2010-1748", "url": "https://bugzilla.suse.com/644521" }, { "category": "external", "summary": "SUSE Bug 649256 for CVE-2010-1748", "url": "https://bugzilla.suse.com/649256" }, { "category": "external", "summary": "SUSE Bug 657780 for CVE-2010-1748", "url": "https://bugzilla.suse.com/657780" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2010-1748" }, { "cve": "CVE-2010-2941", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-2941" } ], "notes": [ { "category": "general", "text": "ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-2941", "url": "https://www.suse.com/security/cve/CVE-2010-2941" }, { "category": "external", "summary": "SUSE Bug 649256 for CVE-2010-2941", "url": "https://bugzilla.suse.com/649256" }, { "category": "external", "summary": "SUSE Bug 654627 for CVE-2010-2941", "url": "https://bugzilla.suse.com/654627" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "critical" } ], "title": "CVE-2010-2941" }, { "cve": "CVE-2012-5519", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5519" } ], "notes": [ { "category": "general", "text": "CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5519", "url": "https://www.suse.com/security/cve/CVE-2012-5519" }, { "category": "external", "summary": "SUSE Bug 1180148 for CVE-2012-5519", "url": "https://bugzilla.suse.com/1180148" }, { "category": "external", "summary": "SUSE Bug 789566 for CVE-2012-5519", "url": "https://bugzilla.suse.com/789566" }, { "category": "external", "summary": "SUSE Bug 882905 for CVE-2012-5519", "url": "https://bugzilla.suse.com/882905" }, { "category": "external", "summary": "SUSE Bug 924208 for CVE-2012-5519", "url": "https://bugzilla.suse.com/924208" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2012-5519" }, { "cve": "CVE-2012-6094", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-6094" } ], "notes": [ { "category": "general", "text": "cups (Common Unix Printing System) \u0027Listen localhost:631\u0027 option not honored correctly which could provide unauthorized access to the system", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-6094", "url": "https://www.suse.com/security/cve/CVE-2012-6094" }, { "category": "external", "summary": "SUSE Bug 795624 for CVE-2012-6094", "url": "https://bugzilla.suse.com/795624" }, { "category": "external", "summary": "SUSE Bug 857372 for CVE-2012-6094", "url": "https://bugzilla.suse.com/857372" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "critical" } ], "title": "CVE-2012-6094" }, { "cve": "CVE-2014-2856", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2856" } ], "notes": [ { "category": "general", "text": "Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2856", "url": "https://www.suse.com/security/cve/CVE-2014-2856" }, { "category": "external", "summary": "SUSE Bug 873899 for CVE-2014-2856", "url": "https://bugzilla.suse.com/873899" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-2856" }, { "cve": "CVE-2014-3537", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3537" } ], "notes": [ { "category": "general", "text": "The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3537", "url": "https://www.suse.com/security/cve/CVE-2014-3537" }, { "category": "external", "summary": "SUSE Bug 887240 for CVE-2014-3537", "url": "https://bugzilla.suse.com/887240" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-3537" }, { "cve": "CVE-2014-5029", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-5029" } ], "notes": [ { "category": "general", "text": "The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-5029", "url": "https://www.suse.com/security/cve/CVE-2014-5029" }, { "category": "external", "summary": "SUSE Bug 887240 for CVE-2014-5029", "url": "https://bugzilla.suse.com/887240" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-5029" }, { "cve": "CVE-2014-5030", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-5030" } ], "notes": [ { "category": "general", "text": "CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-5030", "url": "https://www.suse.com/security/cve/CVE-2014-5030" }, { "category": "external", "summary": "SUSE Bug 887240 for CVE-2014-5030", "url": "https://bugzilla.suse.com/887240" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-5030" }, { "cve": "CVE-2014-5031", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-5031" } ], "notes": [ { "category": "general", "text": "The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-5031", "url": "https://www.suse.com/security/cve/CVE-2014-5031" }, { "category": "external", "summary": "SUSE Bug 887240 for CVE-2014-5031", "url": "https://bugzilla.suse.com/887240" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-5031" }, { "cve": "CVE-2015-1158", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-1158" } ], "notes": [ { "category": "general", "text": "The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-1158", "url": "https://www.suse.com/security/cve/CVE-2015-1158" }, { "category": "external", "summary": "SUSE Bug 924208 for CVE-2015-1158", "url": "https://bugzilla.suse.com/924208" }, { "category": "external", "summary": "SUSE Bug 976653 for CVE-2015-1158", "url": "https://bugzilla.suse.com/976653" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "critical" } ], "title": "CVE-2015-1158" }, { "cve": "CVE-2015-1159", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-1159" } ], "notes": [ { "category": "general", "text": "Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-1159", "url": "https://www.suse.com/security/cve/CVE-2015-1159" }, { "category": "external", "summary": "SUSE Bug 924208 for CVE-2015-1159", "url": "https://bugzilla.suse.com/924208" }, { "category": "external", "summary": "SUSE Bug 976653 for CVE-2015-1159", "url": "https://bugzilla.suse.com/976653" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:cups-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-client-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-ddk-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-devel-32bit-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-2.1.3-2.3.x86_64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.aarch64", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.ppc64le", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.s390x", "openSUSE Tumbleweed:cups-libs-32bit-2.1.3-2.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "critical" } ], "title": "CVE-2015-1159" } ] }
fkie_cve-2009-2820
Vulnerability from fkie_nvd
Published
2009-11-10 19:30
Modified
2025-04-09 00:30
Severity ?
Summary
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
References
▶ | URL | Tags | |
---|---|---|---|
cve@mitre.org | http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html | Vendor Advisory | |
cve@mitre.org | http://secunia.com/advisories/37308 | ||
cve@mitre.org | http://secunia.com/advisories/37360 | ||
cve@mitre.org | http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1 | ||
cve@mitre.org | http://support.apple.com/kb/HT3937 | Patch, Vendor Advisory | |
cve@mitre.org | http://www.cups.org/articles.php?L590 | ||
cve@mitre.org | http://www.cups.org/documentation.php/relnotes.html | ||
cve@mitre.org | http://www.cups.org/str.php?L3367 | ||
cve@mitre.org | http://www.mandriva.com/security/advisories?name=MDVSA-2010:072 | ||
cve@mitre.org | http://www.mandriva.com/security/advisories?name=MDVSA-2010:073 | ||
cve@mitre.org | http://www.redhat.com/support/errata/RHSA-2009-1595.html | ||
cve@mitre.org | http://www.securityfocus.com/bid/36956 | Patch | |
cve@mitre.org | http://www.vupen.com/english/advisories/2009/3184 | ||
cve@mitre.org | https://bugzilla.redhat.com/show_bug.cgi?id=529833 | ||
cve@mitre.org | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/37308 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/37360 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://support.apple.com/kb/HT3937 | Patch, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.cups.org/articles.php?L590 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.cups.org/documentation.php/relnotes.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.cups.org/str.php?L3367 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2010:072 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2010:073 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2009-1595.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/36956 | Patch | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2009/3184 | ||
af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=529833 | ||
af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153 |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
apple | mac_os_x | * | |
apple | mac_os_x | 10.0 | |
apple | mac_os_x | 10.0.0 | |
apple | mac_os_x | 10.0.1 | |
apple | mac_os_x | 10.0.2 | |
apple | mac_os_x | 10.0.3 | |
apple | mac_os_x | 10.0.4 | |
apple | mac_os_x | 10.1 | |
apple | mac_os_x | 10.1.0 | |
apple | mac_os_x | 10.1.1 | |
apple | mac_os_x | 10.1.2 | |
apple | mac_os_x | 10.1.3 | |
apple | mac_os_x | 10.1.4 | |
apple | mac_os_x | 10.1.5 | |
apple | mac_os_x | 10.2 | |
apple | mac_os_x | 10.2.0 | |
apple | mac_os_x | 10.2.1 | |
apple | mac_os_x | 10.2.2 | |
apple | mac_os_x | 10.2.3 | |
apple | mac_os_x | 10.2.4 | |
apple | mac_os_x | 10.2.5 | |
apple | mac_os_x | 10.2.6 | |
apple | mac_os_x | 10.2.7 | |
apple | mac_os_x | 10.2.8 | |
apple | mac_os_x | 10.3 | |
apple | mac_os_x | 10.3.0 | |
apple | mac_os_x | 10.3.1 | |
apple | mac_os_x | 10.3.2 | |
apple | mac_os_x | 10.3.3 | |
apple | mac_os_x | 10.3.4 | |
apple | mac_os_x | 10.3.5 | |
apple | mac_os_x | 10.3.6 | |
apple | mac_os_x | 10.3.7 | |
apple | mac_os_x | 10.3.8 | |
apple | mac_os_x | 10.3.9 | |
apple | mac_os_x | 10.4 | |
apple | mac_os_x | 10.4.0 | |
apple | mac_os_x | 10.4.1 | |
apple | mac_os_x | 10.4.2 | |
apple | mac_os_x | 10.4.3 | |
apple | mac_os_x | 10.4.4 | |
apple | mac_os_x | 10.4.5 | |
apple | mac_os_x | 10.4.6 | |
apple | mac_os_x | 10.4.7 | |
apple | mac_os_x | 10.4.8 | |
apple | mac_os_x | 10.4.9 | |
apple | mac_os_x | 10.4.10 | |
apple | mac_os_x | 10.4.11 | |
apple | mac_os_x | 10.5 | |
apple | mac_os_x | 10.5.0 | |
apple | mac_os_x | 10.5.1 | |
apple | mac_os_x | 10.5.2 | |
apple | mac_os_x | 10.5.3 | |
apple | mac_os_x | 10.5.4 | |
apple | mac_os_x | 10.5.5 | |
apple | mac_os_x | 10.5.6 | |
apple | mac_os_x | 10.5.7 | |
apple | mac_os_x | 10.5.8 | |
apple | mac_os_x | 10.6 | |
apple | mac_os_x_server | * | |
apple | mac_os_x_server | 10.0 | |
apple | mac_os_x_server | 10.0.0 | |
apple | mac_os_x_server | 10.0.1 | |
apple | mac_os_x_server | 10.0.2 | |
apple | mac_os_x_server | 10.0.3 | |
apple | mac_os_x_server | 10.0.4 | |
apple | mac_os_x_server | 10.1 | |
apple | mac_os_x_server | 10.1.0 | |
apple | mac_os_x_server | 10.1.1 | |
apple | mac_os_x_server | 10.1.2 | |
apple | mac_os_x_server | 10.1.3 | |
apple | mac_os_x_server | 10.1.4 | |
apple | mac_os_x_server | 10.1.5 | |
apple | mac_os_x_server | 10.2 | |
apple | mac_os_x_server | 10.2.0 | |
apple | mac_os_x_server | 10.2.1 | |
apple | mac_os_x_server | 10.2.2 | |
apple | mac_os_x_server | 10.2.3 | |
apple | mac_os_x_server | 10.2.4 | |
apple | mac_os_x_server | 10.2.5 | |
apple | mac_os_x_server | 10.2.6 | |
apple | mac_os_x_server | 10.2.7 | |
apple | mac_os_x_server | 10.2.8 | |
apple | mac_os_x_server | 10.3 | |
apple | mac_os_x_server | 10.3.0 | |
apple | mac_os_x_server | 10.3.1 | |
apple | mac_os_x_server | 10.3.2 | |
apple | mac_os_x_server | 10.3.3 | |
apple | mac_os_x_server | 10.3.4 | |
apple | mac_os_x_server | 10.3.5 | |
apple | mac_os_x_server | 10.3.6 | |
apple | mac_os_x_server | 10.3.7 | |
apple | mac_os_x_server | 10.3.8 | |
apple | mac_os_x_server | 10.3.9 | |
apple | mac_os_x_server | 10.4 | |
apple | mac_os_x_server | 10.4.0 | |
apple | mac_os_x_server | 10.4.1 | |
apple | mac_os_x_server | 10.4.2 | |
apple | mac_os_x_server | 10.4.3 | |
apple | mac_os_x_server | 10.4.4 | |
apple | mac_os_x_server | 10.4.5 | |
apple | mac_os_x_server | 10.4.6 | |
apple | mac_os_x_server | 10.4.7 | |
apple | mac_os_x_server | 10.4.8 | |
apple | mac_os_x_server | 10.4.9 | |
apple | mac_os_x_server | 10.4.10 | |
apple | mac_os_x_server | 10.4.11 | |
apple | mac_os_x_server | 10.5 | |
apple | mac_os_x_server | 10.5.0 | |
apple | mac_os_x_server | 10.5.1 | |
apple | mac_os_x_server | 10.5.2 | |
apple | mac_os_x_server | 10.5.3 | |
apple | mac_os_x_server | 10.5.4 | |
apple | mac_os_x_server | 10.5.5 | |
apple | mac_os_x_server | 10.5.6 | |
apple | mac_os_x_server | 10.5.7 | |
apple | mac_os_x_server | 10.5.8 | |
apple | mac_os_x_server | 10.6 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E61F244-C6E5-48F1-8C18-5A7D862DA638", "versionEndIncluding": "10.6.1", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "99C273D1-ADFE-4B4C-B543-7B9CA741A117", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "399A8984-AADE-4281-A62F-A066D8F450A4", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "066ABC3B-B395-42D2-95C0-5B810F91A6F0", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*", "matchCriteriaId": "01BC19FC-6E03-4000-AE4B-232E47FA76F2", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "734BE71B-82F5-49C6-AB43-F662105D8746", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "421FC2DD-0CF7-44A2-A63C-5221689E2363", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "0F8B70BC-42B7-453A-B506-7BE69D49A4B5", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "CA32F7D8-02F8-4CFE-B193-2888807BC4D6", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*", "matchCriteriaId": "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "BB7F7799-33A1-4A8E-915A-B0D503A3DFFE", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "AE52A344-8B07-480D-A57F-B1F6E6574F3B", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "56CC0444-570C-4BB5-B53A-C5CA0BD87935", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "62E3EED7-FE30-4620-B40B-9CC49B77408A", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "D7A24978-2891-425C-ACF6-E8F5C839C54A", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "9B20E130-6078-4336-B614-273C27142B46", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "AB461678-560D-436E-A3AE-9E1E16DB0412", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*", "matchCriteriaId": "BFDADE04-29F0-446B-824B-0518880CF0A0", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "ED9BE602-A740-4CF7-9CAF-59061B16AB31", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "33E698C1-C313-40E6-BAF9-7C8F9CF02484", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "BF2D00AC-FA2A-4C39-B796-DC19072862CF", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "421079DA-B605-4E05-9454-C30CF7631CF4", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "93B734BA-3435-40A9-B22B-5D56CEB865A7", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "30897327-44DD-4D6C-B8B6-2D66C44EA55D", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*", "matchCriteriaId": "B79D8F73-2E78-4A67-96BB-21AD9BCB0094", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*", "matchCriteriaId": "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*", "matchCriteriaId": "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "AFD4DE58-46C7-4E69-BF36-C5FD768B8248", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "CF824694-52DE-44E3-ACAD-60B2A84CD3CE", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "B73A0891-A37A-4E0D-AA73-B18BFD6B1447", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "0C580935-0091-4163-B747-750FB7686973", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "BB0F2132-8431-4CEF-9A3D-A69425E3834E", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "8719F3C4-F1DE-49B5-9301-22414A2B6F9C", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "09ED46A8-1739-411C-8807-2A416BDB6DFE", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "786BB737-EA99-4EC6-B742-0C35BF2453F9", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "8D089858-3AF9-4B82-912D-AA33F25E3715", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*", "matchCriteriaId": "6EE39585-CF3B-4493-96D8-B394544C7643", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*", "matchCriteriaId": "D2442D35-7484-43D8-9077-3FDF63104816", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "DC90AA12-DD17-4607-90CB-E342E83F20BB", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "B3267A41-1AE0-48B8-BD1F-DEC8A212851A", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "855288F1-0242-4951-AB3F-B7AF13E21CF6", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "10082781-B93E-4B84-94F2-FA9749B4D92B", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "AE1EBF04-C440-4A6B-93F2-DC3A812728C2", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "DFB077A2-927B-43AF-BFD5-0E78648C9394", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*", "matchCriteriaId": "2398ADC8-A106-462E-B9AE-F8AF800D0A3C", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*", "matchCriteriaId": "1335E35A-D381-4056-9E78-37BC6DF8AD98", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*", "matchCriteriaId": "AFB40DFD-621D-4069-93E2-9EE32411082F", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "093B82BC-936B-404D-8F19-DBE4FEB8BB07", "versionEndIncluding": "10.6.1", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "DB279593-17D1-4A65-BF54-969B38B74B23", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "90383DA6-C449-462B-84AD-8DC567D367ED", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "4D846700-3355-42CA-B15E-7F08F935F2B9", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "3891C974-DBDE-42AD-ADBA-C8689D0D055D", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "6A6CE48E-FB74-4F49-911D-936B09677753", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "ADAB244E-0391-49E9-B36B-A7CB34CF7152", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*", "matchCriteriaId": "80F5B731-D5A7-4694-9B27-CEE1DCC810EC", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "DA38FB0C-3959-4C5A-B06D-39B2A340A173", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "36F4618C-1408-4097-B97D-5F32DE6D01DF", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "5F558C40-D0DA-4700-95DA-DF1322C020E6", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "64F8F30B-E4B8-4745-AFFA-8FD620E61994", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*", "matchCriteriaId": "00AE033B-5F16-4262-A397-02D7450189B8", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "02B8266D-69BB-417D-A776-DB9CF58A4C67", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "2E831F3E-A980-47AF-BD05-2DB1A14689B4", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "36991737-904F-4B26-AEE2-7B30411279E8", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "F7EE6036-1A18-43F1-8A92-7DF39E1516E3", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "620ECFC8-293D-4C2B-9698-67185BB6E2EF", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "C1F14A45-BDDB-4C12-9370-D5241975A928", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "46BC34D4-A1E8-4E01-982D-EAF03A0EB886", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "35932546-B614-47C0-98E6-8EF1EFE06725", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "38F17066-C090-4DD7-A1AC-D8FF70D268CE", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*", "matchCriteriaId": "1E997653-C744-4F1F-9948-47579AB3BED3", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "81F060C7-AC9E-4844-A430-14B3DFC90E3A", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "384C130F-D1A9-4482-AF20-FC81933473A3", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "3CA6BD2A-3022-408D-8E4F-50865996E965", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "463D5628-7536-4029-99D6-5E525050059E", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "69A39B11-1C23-4A6C-B4C5-AEC40836F173", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "78D48FD1-CB91-4310-9432-A4365FA67B11", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*", "matchCriteriaId": "750C6C37-8460-4ED8-83AD-ACAF993E4A6E", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*", "matchCriteriaId": "8923EE1A-DD48-4EC8-8698-A33093FD709C", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*", "matchCriteriaId": "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "F60BF582-F700-4E26-A4AF-5BF657803525", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "29644501-54BD-45E9-A6C1-618892CD354F", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "8A132487-E89F-4D0D-8366-14AFC904811F", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "FD231103-D7C7-4697-BE90-D67558D6115C", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "BCADAAA0-C885-466C-A122-A94E73EAF817", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "2BE429EF-24D4-453A-8B43-8CCEF5D72773", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "8AC9692A-CE81-446D-B136-449662C4B9A2", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "504D78AB-5374-48C9-B357-DB6BD2267D2D", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "3029892E-1375-4F40-83D3-A51BDC4E9840", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "81F8DA6D-2258-4138-8FB2-90BE3C68B230", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*", "matchCriteriaId": "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*", "matchCriteriaId": "20E8648C-5469-4280-A581-D4A9A41B7213", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "C7817232-BE3E-4655-8282-A979E5D40D3D", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "77E8D614-E1EE-42F1-9E55-EA54FB500621", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "C73BED9E-29FB-4965-B38F-013FFE5A9170", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "C147E866-B80F-4FFA-BBE8-19E84A46DB1C", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*", "matchCriteriaId": "ADF94705-562C-4EC8-993E-1AD88F01549C", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*", "matchCriteriaId": "82B4CD59-9F37-4EF0-BA43-427CFD6E1329", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*", "matchCriteriaId": "8750269D-DF74-4DE5-AA08-BD2B13445F0B", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product\u0027s web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues." }, { "lang": "es", "value": "CUPS en Apple Mac OS X anterior a v10.6.2no maneja adecuadamente (1) las cabeceras HTTP y (2) las plantillas HTML, lo que permite a atacantes remotos dirigir ataques de petici\u00f3n de sitios cruzados (XSS) y ataques de separaci\u00f3n de respuesta HTTP a trav\u00e9s de vectores relacionados con (a) la interfaz web del producto, (b) la configuraci\u00f3n del sistema de impresi\u00f3n, y (c) los t\u00edtulos de los trabajos impresos." } ], "id": "CVE-2009-2820", "lastModified": "2025-04-09T00:30:58.490", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true } ] }, "published": "2009-11-10T19:30:01.217", "references": [ { "source": "cve@mitre.org", "tags": [ "Vendor Advisory" ], "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html" }, { "source": "cve@mitre.org", "url": "http://secunia.com/advisories/37308" }, { "source": "cve@mitre.org", "url": "http://secunia.com/advisories/37360" }, { "source": "cve@mitre.org", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1" }, { "source": "cve@mitre.org", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://support.apple.com/kb/HT3937" }, { "source": "cve@mitre.org", "url": "http://www.cups.org/articles.php?L590" }, { "source": "cve@mitre.org", "url": "http://www.cups.org/documentation.php/relnotes.html" }, { "source": "cve@mitre.org", "url": "http://www.cups.org/str.php?L3367" }, { "source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:072" }, { "source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073" }, { "source": "cve@mitre.org", "url": "http://www.redhat.com/support/errata/RHSA-2009-1595.html" }, { "source": "cve@mitre.org", "tags": [ "Patch" ], "url": "http://www.securityfocus.com/bid/36956" }, { "source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2009/3184" }, { "source": "cve@mitre.org", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/37308" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/37360" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://support.apple.com/kb/HT3937" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.cups.org/articles.php?L590" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.cups.org/documentation.php/relnotes.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.cups.org/str.php?L3367" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:072" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.redhat.com/support/errata/RHSA-2009-1595.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch" ], "url": "http://www.securityfocus.com/bid/36956" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2009/3184" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=529833" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-79" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…