Cups multiple security vulnerabilities
Published:		27.02.2008
Source:		BUGTRAQ
SecurityVulns ID:		8724
Type:		remote
Level:		5/10
Description:		Code execution on URI handling, multiple DoS conditions.

Affected:		CUPS : cups 1.1
		CUPS : cups 1.2
CVE:		CVE-2008-0886
		CVE-2008-0882 (Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information.)
		CVE-2008-0597
		CVE-2008-0596
		CVE-2008-0047
		CVE-2007-5848 (Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service.)

Original document

MANDRIVA, [ MDVSA-2008:050 ] - Updated cups packages fix multiple vulnerabilities (27.02.2008)

Discuss:

Read or add your comments to this news (0 comments)