Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2005-2874

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2005-2874
Last Modified 21 Aug 2010 12:32:19
Published 13 Sep 2005 06:03:00
Confidentiality Impact NONE NONE
Integrity Impact NONE NONE
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2005-2874

Summary

The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.

Vulnerable Systems

Application

  • Easy Software Products Cups 1.1

  • Easy Software Products Cups 1.1.1

  • Easy Software Products Cups 1.1.10

  • Easy Software Products Cups 1.1.10 1

  • Easy Software Products Cups 1.1.11

  • Easy Software Products Cups 1.1.12

  • Easy Software Products Cups 1.1.13

  • Easy Software Products Cups 1.1.14

  • Easy Software Products Cups 1.1.15

  • Easy Software Products Cups 1.1.16

  • Easy Software Products Cups 1.1.17

  • Easy Software Products Cups 1.1.18

  • Easy Software Products Cups 1.1.19

  • Easy Software Products Cups 1.1.19 Rc1

  • Easy Software Products Cups 1.1.19 Rc2

  • Easy Software Products Cups 1.1.19 Rc3

  • Easy Software Products Cups 1.1.19 Rc4

  • Easy Software Products Cups 1.1.19 Rc5

  • Easy Software Products Cups 1.1.2

  • Easy Software Products Cups 1.1.20

  • Easy Software Products Cups 1.1.20 Rc1

  • Easy Software Products Cups 1.1.20 Rc2

  • Easy Software Products Cups 1.1.20 Rc3

  • Easy Software Products Cups 1.1.20 Rc4

  • Easy Software Products Cups 1.1.20 Rc5

  • Easy Software Products Cups 1.1.20 Rc6

  • Easy Software Products Cups 1.1.21

  • Easy Software Products Cups 1.1.21 Rc1

  • Easy Software Products Cups 1.1.21 Rc2

  • Easy Software Products Cups 1.1.22

  • Easy Software Products Cups 1.1.22 Rc1

  • Easy Software Products Cups 1.1.22 Rc2

  • Easy Software Products Cups 1.1.3

  • Easy Software Products Cups 1.1.4

  • Easy Software Products Cups 1.1.5

  • Easy Software Products Cups 1.1.5 1

  • Easy Software Products Cups 1.1.5 2

  • Easy Software Products Cups 1.1.6

  • Easy Software Products Cups 1.1.6 1

  • Easy Software Products Cups 1.1.6 2

  • Easy Software Products Cups 1.1.6 3

  • Easy Software Products Cups 1.1.7

  • Easy Software Products Cups 1.1.8

  • Easy Software Products Cups 1.1.9

  • Easy Software Products Cups 1.1.9 1


References

MISC - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168072

SECTRACK - 1012811

CONFIRM - http://www.cups.org/str.php?L1042+P0+S-1+C0+I0+E0+Q1042

CONFIRM - http://www.cups.org/relnotes.php#010123

REDHAT - RHSA-2005:772

FEDORA - FEDORA-2005-908


Last Updated: 27 May 2016 10:40:40