Vulnerability-Lookup

BDU:2015-01805 (CVE-2002-1366)

Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета libcupsys1-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Severity

10.0 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:C/I:C/A:C

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

Aliases

CVE-2002-1366, CVE-2002-1367, CVE-2002-1368, CVE-2002-1369, CVE-2002-1371, CVE-2002-1372, CVE-2002-1383, CVE-2002-1384, DSA-232, ID:1400947

References

9 references

URL
http://www.debian.org/security/dsa-232/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1369
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1368
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1372
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1371
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1367
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1366
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1383
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1384

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 3.0 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 3.0: ppc: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 s390x: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 m68k: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 i686: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 hppa: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 sparc: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 alpha: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 ia64: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 mips: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 mipsel: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 arm: cupsys - 1.1.14-4.4 cupsys-bsd - 1.1.14-4.4 cupsys-client - 1.1.14-4.4 cupsys-pstoraster - 1.1.14-4.4 libcupsys2 - 1.1.14-4.4 libcupsys2-dev - 1.1.14-4.4 Debian GNU/Linux 2.2: ppc: cupsys - 1.0.4-12.1 cupsys-bsd - 1.0.4-12.1 libcupsys1 - 1.0.4-12.1 libcupsys1-dev - 1.0.4-12.1 m68k: cupsys - 1.0.4-12.1 cupsys-bsd - 1.0.4-12.1 libcupsys1 - 1.0.4-12.1 libcupsys1-dev - 1.0.4-12.1 i686: cupsys - 1.0.4-12.1 cupsys-bsd - 1.0.4-12.1 libcupsys1 - 1.0.4-12.1 libcupsys1-dev - 1.0.4-12.1 sparc: cupsys - 1.0.4-12.1 cupsys-bsd - 1.0.4-12.1 libcupsys1 - 1.0.4-12.1 libcupsys1-dev - 1.0.4-12.1 alpha: cupsys - 1.0.4-12.1 cupsys-bsd - 1.0.4-12.1 libcupsys1 - 1.0.4-12.1 libcupsys1-dev - 1.0.4-12.1 arm: cupsys - 1.0.4-12.1 cupsys-bsd - 1.0.4-12.1 libcupsys1 - 1.0.4-12.1 libcupsys1-dev - 1.0.4-12.1

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 3.0 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 3.0:\n\tppc:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\ts390x:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\tm68k:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\ti686:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\thppa:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\tsparc:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\talpha:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\tia64:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\tmips:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\tmipsel:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\n\tarm:\n\t\tcupsys - 1.1.14-4.4\n\t\tcupsys-bsd - 1.1.14-4.4\n\t\tcupsys-client - 1.1.14-4.4\n\t\tcupsys-pstoraster - 1.1.14-4.4\n\t\tlibcupsys2 - 1.1.14-4.4\n\t\tlibcupsys2-dev - 1.1.14-4.4\nDebian GNU/Linux 2.2:\n\tppc:\n\t\tcupsys - 1.0.4-12.1\n\t\tcupsys-bsd - 1.0.4-12.1\n\t\tlibcupsys1 - 1.0.4-12.1\n\t\tlibcupsys1-dev - 1.0.4-12.1\n\tm68k:\n\t\tcupsys - 1.0.4-12.1\n\t\tcupsys-bsd - 1.0.4-12.1\n\t\tlibcupsys1 - 1.0.4-12.1\n\t\tlibcupsys1-dev - 1.0.4-12.1\n\ti686:\n\t\tcupsys - 1.0.4-12.1\n\t\tcupsys-bsd - 1.0.4-12.1\n\t\tlibcupsys1 - 1.0.4-12.1\n\t\tlibcupsys1-dev - 1.0.4-12.1\n\tsparc:\n\t\tcupsys - 1.0.4-12.1\n\t\tcupsys-bsd - 1.0.4-12.1\n\t\tlibcupsys1 - 1.0.4-12.1\n\t\tlibcupsys1-dev - 1.0.4-12.1\n\talpha:\n\t\tcupsys - 1.0.4-12.1\n\t\tcupsys-bsd - 1.0.4-12.1\n\t\tlibcupsys1 - 1.0.4-12.1\n\t\tlibcupsys1-dev - 1.0.4-12.1\n\tarm:\n\t\tcupsys - 1.0.4-12.1\n\t\tcupsys-bsd - 1.0.4-12.1\n\t\tlibcupsys1 - 1.0.4-12.1\n\t\tlibcupsys1-dev - 1.0.4-12.1",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01805",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2002-1366, CVE-2002-1367, CVE-2002-1368, CVE-2002-1369, CVE-2002-1371, CVE-2002-1372, CVE-2002-1383, CVE-2002-1384, DSA-232, ID:1400947",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libcupsys1-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-232/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1369\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1368\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1372\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1371\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1367\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1366\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1383\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1384",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}

CVE-2002-1366 (GCVE-0-2002-1366)

Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2024-08-08 03:19

Summary

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

9 references

URL	Tags
http://archives.neohapsis.com/archives/vulnwatch/…	mailing-listx_refsource_VULNWATCH
http://www.debian.org/security/2003/dsa-232	vendor-advisoryx_refsource_DEBIAN
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.idefense.com/advisory/12.19.02.txt	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2002-295.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=104032149026670&w=2	mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/6435	vdb-entryx_refsource_BID
http://www.mandrakesoft.com/security/advisories?n…	vendor-advisoryx_refsource_MANDRAKE

Date Public

2002-12-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.542Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_VULNWATCH",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
          },
          {
            "name": "DSA-232",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-232"
          },
          {
            "name": "SuSE-SA:2003:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/12.19.02.txt"
          },
          {
            "name": "RHSA-2002:295",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
          },
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
          },
          {
            "name": "cups-certs-race-condition(10907)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10907"
          },
          {
            "name": "6435",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6435"
          },
          {
            "name": "MDKSA-2003:001",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-12-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-12-20T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_VULNWATCH"
          ],
          "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
        },
        {
          "name": "DSA-232",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-232"
        },
        {
          "name": "SuSE-SA:2003:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/12.19.02.txt"
        },
        {
          "name": "RHSA-2002:295",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
        },
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
        },
        {
          "name": "cups-certs-race-condition(10907)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10907"
        },
        {
          "name": "6435",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6435"
        },
        {
          "name": "MDKSA-2003:001",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1366",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "VULNWATCH",
              "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
            },
            {
              "name": "DSA-232",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-232"
            },
            {
              "name": "SuSE-SA:2003:002",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
            },
            {
              "name": "http://www.idefense.com/advisory/12.19.02.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/12.19.02.txt"
            },
            {
              "name": "RHSA-2002:295",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
            },
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
            },
            {
              "name": "cups-certs-race-condition(10907)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10907"
            },
            {
              "name": "6435",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6435"
            },
            {
              "name": "MDKSA-2003:001",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1366",
    "datePublished": "2004-09-01T04:00:00.000Z",
    "dateReserved": "2002-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:19:28.542Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2002-1367 (GCVE-0-2002-1367)

Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2024-08-08 03:19

Summary

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

10 references

URL	Tags
http://archives.neohapsis.com/archives/vulnwatch/…	mailing-listx_refsource_VULNWATCH
http://distro.conectiva.com.br/atualizacoes/?id=a…	vendor-advisoryx_refsource_CONECTIVA
http://www.debian.org/security/2003/dsa-232	vendor-advisoryx_refsource_DEBIAN
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.idefense.com/advisory/12.19.02.txt	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2002-295.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=104032149026670&w=2	mailing-listx_refsource_BUGTRAQ
http://www.mandrakesoft.com/security/advisories?n…	vendor-advisoryx_refsource_MANDRAKE
http://www.securityfocus.com/bid/6436	vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Date Public

2002-12-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.667Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_VULNWATCH",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
          },
          {
            "name": "CLSA-2003:702",
            "tags": [
              "vendor-advisory",
              "x_refsource_CONECTIVA",
              "x_transferred"
            ],
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
          },
          {
            "name": "DSA-232",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-232"
          },
          {
            "name": "SuSE-SA:2003:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/12.19.02.txt"
          },
          {
            "name": "RHSA-2002:295",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
          },
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
          },
          {
            "name": "MDKSA-2003:001",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
          },
          {
            "name": "6436",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6436"
          },
          {
            "name": "cups-udp-add-printers(10908)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10908"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-12-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a \"need authorization\" page, as demonstrated by new-coke."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-12-20T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_VULNWATCH"
          ],
          "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
        },
        {
          "name": "CLSA-2003:702",
          "tags": [
            "vendor-advisory",
            "x_refsource_CONECTIVA"
          ],
          "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
        },
        {
          "name": "DSA-232",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-232"
        },
        {
          "name": "SuSE-SA:2003:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/12.19.02.txt"
        },
        {
          "name": "RHSA-2002:295",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
        },
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
        },
        {
          "name": "MDKSA-2003:001",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
        },
        {
          "name": "6436",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6436"
        },
        {
          "name": "cups-udp-add-printers(10908)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10908"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1367",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a \"need authorization\" page, as demonstrated by new-coke."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "VULNWATCH",
              "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
            },
            {
              "name": "CLSA-2003:702",
              "refsource": "CONECTIVA",
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
            },
            {
              "name": "DSA-232",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-232"
            },
            {
              "name": "SuSE-SA:2003:002",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
            },
            {
              "name": "http://www.idefense.com/advisory/12.19.02.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/12.19.02.txt"
            },
            {
              "name": "RHSA-2002:295",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
            },
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
            },
            {
              "name": "MDKSA-2003:001",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
            },
            {
              "name": "6436",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6436"
            },
            {
              "name": "cups-udp-add-printers(10908)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10908"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1367",
    "datePublished": "2004-09-01T04:00:00.000Z",
    "dateReserved": "2002-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:19:28.667Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2002-1368 (GCVE-0-2002-1368)

Vulnerability from cvelistv5 – Published: 2002-12-20 05:00 – Updated: 2024-08-08 03:19

Summary

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

20 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/7858	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/7843	third-party-advisoryx_refsource_SECUNIA
http://archives.neohapsis.com/archives/vulnwatch/…	mailing-listx_refsource_VULNWATCH
http://secunia.com/advisories/9325/	third-party-advisoryx_refsource_SECUNIA
http://distro.conectiva.com.br/atualizacoes/?id=a…	vendor-advisoryx_refsource_CONECTIVA
ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-200…	vendor-advisoryx_refsource_CALDERA
http://secunia.com/advisories/7756/	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/7907	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://secunia.com/advisories/7913/	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/7794	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2003/dsa-232	vendor-advisoryx_refsource_DEBIAN
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.idefense.com/advisory/12.19.02.txt	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2002-295.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/6437	vdb-entryx_refsource_BID
http://secunia.com/advisories/7803	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/8080/	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=104032149026670&w=2	mailing-listx_refsource_BUGTRAQ

Date Public

2002-12-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.613Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cups-neg-memcpy-bo(10909)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10909"
          },
          {
            "name": "7858",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7858"
          },
          {
            "name": "7843",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7843"
          },
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_VULNWATCH",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
          },
          {
            "name": "9325",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/9325/"
          },
          {
            "name": "CLSA-2003:702",
            "tags": [
              "vendor-advisory",
              "x_refsource_CONECTIVA",
              "x_transferred"
            ],
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
          },
          {
            "name": "CSSA-2003-004.0",
            "tags": [
              "vendor-advisory",
              "x_refsource_CALDERA",
              "x_transferred"
            ],
            "url": "ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt"
          },
          {
            "name": "7756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7756/"
          },
          {
            "name": "7907",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7907"
          },
          {
            "name": "MDKSA-2003:001",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:001"
          },
          {
            "name": "7913",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7913/"
          },
          {
            "name": "7794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7794"
          },
          {
            "name": "DSA-232",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-232"
          },
          {
            "name": "SuSE-SA:2003:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/12.19.02.txt"
          },
          {
            "name": "RHSA-2002:295",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
          },
          {
            "name": "6437",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6437"
          },
          {
            "name": "7803",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7803"
          },
          {
            "name": "8080",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/8080/"
          },
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-12-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "cups-neg-memcpy-bo(10909)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10909"
        },
        {
          "name": "7858",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7858"
        },
        {
          "name": "7843",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7843"
        },
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_VULNWATCH"
          ],
          "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
        },
        {
          "name": "9325",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/9325/"
        },
        {
          "name": "CLSA-2003:702",
          "tags": [
            "vendor-advisory",
            "x_refsource_CONECTIVA"
          ],
          "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
        },
        {
          "name": "CSSA-2003-004.0",
          "tags": [
            "vendor-advisory",
            "x_refsource_CALDERA"
          ],
          "url": "ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt"
        },
        {
          "name": "7756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7756/"
        },
        {
          "name": "7907",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7907"
        },
        {
          "name": "MDKSA-2003:001",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:001"
        },
        {
          "name": "7913",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7913/"
        },
        {
          "name": "7794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7794"
        },
        {
          "name": "DSA-232",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-232"
        },
        {
          "name": "SuSE-SA:2003:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/12.19.02.txt"
        },
        {
          "name": "RHSA-2002:295",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
        },
        {
          "name": "6437",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6437"
        },
        {
          "name": "7803",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7803"
        },
        {
          "name": "8080",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/8080/"
        },
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1368",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "cups-neg-memcpy-bo(10909)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10909"
            },
            {
              "name": "7858",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7858"
            },
            {
              "name": "7843",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7843"
            },
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "VULNWATCH",
              "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
            },
            {
              "name": "9325",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/9325/"
            },
            {
              "name": "CLSA-2003:702",
              "refsource": "CONECTIVA",
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
            },
            {
              "name": "CSSA-2003-004.0",
              "refsource": "CALDERA",
              "url": "ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt"
            },
            {
              "name": "7756",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7756/"
            },
            {
              "name": "7907",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7907"
            },
            {
              "name": "MDKSA-2003:001",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:001"
            },
            {
              "name": "7913",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7913/"
            },
            {
              "name": "7794",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7794"
            },
            {
              "name": "DSA-232",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-232"
            },
            {
              "name": "SuSE-SA:2003:002",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
            },
            {
              "name": "http://www.idefense.com/advisory/12.19.02.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/12.19.02.txt"
            },
            {
              "name": "RHSA-2002:295",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
            },
            {
              "name": "6437",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6437"
            },
            {
              "name": "7803",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7803"
            },
            {
              "name": "8080",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/8080/"
            },
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1368",
    "datePublished": "2002-12-20T05:00:00.000Z",
    "dateReserved": "2002-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:19:28.613Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2002-1369 (GCVE-0-2002-1369)

Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2024-08-08 03:19

Summary

jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

10 references

URL	Tags
http://archives.neohapsis.com/archives/vulnwatch/…	mailing-listx_refsource_VULNWATCH
http://distro.conectiva.com.br/atualizacoes/?id=a…	vendor-advisoryx_refsource_CONECTIVA
http://www.debian.org/security/2003/dsa-232	vendor-advisoryx_refsource_DEBIAN
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.idefense.com/advisory/12.19.02.txt	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2002-295.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=104032149026670&w=2	mailing-listx_refsource_BUGTRAQ
http://www.mandrakesoft.com/security/advisories?n…	vendor-advisoryx_refsource_MANDRAKE
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/6438	vdb-entryx_refsource_BID

Date Public

2002-12-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.824Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_VULNWATCH",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
          },
          {
            "name": "CLSA-2003:702",
            "tags": [
              "vendor-advisory",
              "x_refsource_CONECTIVA",
              "x_transferred"
            ],
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
          },
          {
            "name": "DSA-232",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-232"
          },
          {
            "name": "SuSE-SA:2003:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/12.19.02.txt"
          },
          {
            "name": "RHSA-2002:295",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
          },
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
          },
          {
            "name": "MDKSA-2003:001",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
          },
          {
            "name": "cups-strncat-options-bo(10910)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10910"
          },
          {
            "name": "6438",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6438"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-12-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-12-20T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_VULNWATCH"
          ],
          "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
        },
        {
          "name": "CLSA-2003:702",
          "tags": [
            "vendor-advisory",
            "x_refsource_CONECTIVA"
          ],
          "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
        },
        {
          "name": "DSA-232",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-232"
        },
        {
          "name": "SuSE-SA:2003:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/12.19.02.txt"
        },
        {
          "name": "RHSA-2002:295",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
        },
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
        },
        {
          "name": "MDKSA-2003:001",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
        },
        {
          "name": "cups-strncat-options-bo(10910)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10910"
        },
        {
          "name": "6438",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6438"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1369",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "VULNWATCH",
              "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
            },
            {
              "name": "CLSA-2003:702",
              "refsource": "CONECTIVA",
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
            },
            {
              "name": "DSA-232",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-232"
            },
            {
              "name": "SuSE-SA:2003:002",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
            },
            {
              "name": "http://www.idefense.com/advisory/12.19.02.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/12.19.02.txt"
            },
            {
              "name": "RHSA-2002:295",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
            },
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
            },
            {
              "name": "MDKSA-2003:001",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
            },
            {
              "name": "cups-strncat-options-bo(10910)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10910"
            },
            {
              "name": "6438",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6438"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1369",
    "datePublished": "2004-09-01T04:00:00.000Z",
    "dateReserved": "2002-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:19:28.824Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2002-1371 (GCVE-0-2002-1371)

Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2024-08-08 03:19

Summary

filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

10 references

URL	Tags
http://archives.neohapsis.com/archives/vulnwatch/…	mailing-listx_refsource_VULNWATCH
http://distro.conectiva.com.br/atualizacoes/?id=a…	vendor-advisoryx_refsource_CONECTIVA
http://www.debian.org/security/2003/dsa-232	vendor-advisoryx_refsource_DEBIAN
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.idefense.com/advisory/12.19.02.txt	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2002-295.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=104032149026670&w=2	mailing-listx_refsource_BUGTRAQ
http://www.mandrakesoft.com/security/advisories?n…	vendor-advisoryx_refsource_MANDRAKE
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/6439	vdb-entryx_refsource_BID

Date Public

2002-12-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.603Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_VULNWATCH",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
          },
          {
            "name": "CLSA-2003:702",
            "tags": [
              "vendor-advisory",
              "x_refsource_CONECTIVA",
              "x_transferred"
            ],
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
          },
          {
            "name": "DSA-232",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-232"
          },
          {
            "name": "SuSE-SA:2003:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/12.19.02.txt"
          },
          {
            "name": "RHSA-2002:295",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
          },
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
          },
          {
            "name": "MDKSA-2003:001",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
          },
          {
            "name": "cups-zero-width-images(10911)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10911"
          },
          {
            "name": "6439",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6439"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-12-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-12-20T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_VULNWATCH"
          ],
          "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
        },
        {
          "name": "CLSA-2003:702",
          "tags": [
            "vendor-advisory",
            "x_refsource_CONECTIVA"
          ],
          "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
        },
        {
          "name": "DSA-232",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-232"
        },
        {
          "name": "SuSE-SA:2003:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/12.19.02.txt"
        },
        {
          "name": "RHSA-2002:295",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
        },
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
        },
        {
          "name": "MDKSA-2003:001",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
        },
        {
          "name": "cups-zero-width-images(10911)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10911"
        },
        {
          "name": "6439",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6439"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1371",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "VULNWATCH",
              "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
            },
            {
              "name": "CLSA-2003:702",
              "refsource": "CONECTIVA",
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
            },
            {
              "name": "DSA-232",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-232"
            },
            {
              "name": "SuSE-SA:2003:002",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
            },
            {
              "name": "http://www.idefense.com/advisory/12.19.02.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/12.19.02.txt"
            },
            {
              "name": "RHSA-2002:295",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
            },
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
            },
            {
              "name": "MDKSA-2003:001",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
            },
            {
              "name": "cups-zero-width-images(10911)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10911"
            },
            {
              "name": "6439",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6439"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1371",
    "datePublished": "2004-09-01T04:00:00.000Z",
    "dateReserved": "2002-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:19:28.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2002-1372 (GCVE-0-2002-1372)

Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2025-01-16 17:42

Summary

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-01-25 15:24 UTC

CWE

n/a
CWE-252 - Unchecked Return Value

Assigner

mitre mitre root Scorecard

References

10 references

URL	Tags
http://archives.neohapsis.com/archives/vulnwatch/…	mailing-listx_refsource_VULNWATCH
http://distro.conectiva.com.br/atualizacoes/?id=a…	vendor-advisoryx_refsource_CONECTIVA
http://www.debian.org/security/2003/dsa-232	vendor-advisoryx_refsource_DEBIAN
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.idefense.com/advisory/12.19.02.txt	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2002-295.html	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=bugtraq&m=104032149026670&w=2	mailing-listx_refsource_BUGTRAQ
http://www.mandrakesoft.com/security/advisories?n…	vendor-advisoryx_refsource_MANDRAKE
http://www.securityfocus.com/bid/6440	vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Date Public

2002-12-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.771Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_VULNWATCH",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
          },
          {
            "name": "CLSA-2003:702",
            "tags": [
              "vendor-advisory",
              "x_refsource_CONECTIVA",
              "x_transferred"
            ],
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
          },
          {
            "name": "DSA-232",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-232"
          },
          {
            "name": "SuSE-SA:2003:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/12.19.02.txt"
          },
          {
            "name": "RHSA-2002:295",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
          },
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
          },
          {
            "name": "MDKSA-2003:001",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
          },
          {
            "name": "6440",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6440"
          },
          {
            "name": "cups-file-descriptor-dos(10912)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10912"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2002-1372",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-01-25T15:24:01.752587Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-252",
                "description": "CWE-252 Unchecked Return Value",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-16T17:42:09.355Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-12-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-12-20T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_VULNWATCH"
          ],
          "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
        },
        {
          "name": "CLSA-2003:702",
          "tags": [
            "vendor-advisory",
            "x_refsource_CONECTIVA"
          ],
          "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
        },
        {
          "name": "DSA-232",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-232"
        },
        {
          "name": "SuSE-SA:2003:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/12.19.02.txt"
        },
        {
          "name": "RHSA-2002:295",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
        },
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
        },
        {
          "name": "MDKSA-2003:001",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
        },
        {
          "name": "6440",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6440"
        },
        {
          "name": "cups-file-descriptor-dos(10912)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10912"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1372",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "VULNWATCH",
              "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
            },
            {
              "name": "CLSA-2003:702",
              "refsource": "CONECTIVA",
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000702"
            },
            {
              "name": "DSA-232",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-232"
            },
            {
              "name": "SuSE-SA:2003:002",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
            },
            {
              "name": "http://www.idefense.com/advisory/12.19.02.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/12.19.02.txt"
            },
            {
              "name": "RHSA-2002:295",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
            },
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
            },
            {
              "name": "MDKSA-2003:001",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
            },
            {
              "name": "6440",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6440"
            },
            {
              "name": "cups-file-descriptor-dos(10912)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10912"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1372",
    "datePublished": "2004-09-01T04:00:00.000Z",
    "dateReserved": "2002-12-16T00:00:00.000Z",
    "dateUpdated": "2025-01-16T17:42:09.355Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2002-1383 (GCVE-0-2002-1383)

Vulnerability from cvelistv5 – Published: 2002-12-20 05:00 – Updated: 2024-08-08 03:19

Summary

Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

15 references

URL	Tags
http://secunia.com/advisories/7858	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/7843	third-party-advisoryx_refsource_SECUNIA
http://archives.neohapsis.com/archives/vulnwatch/…	mailing-listx_refsource_VULNWATCH
http://secunia.com/advisories/9325/	third-party-advisoryx_refsource_SECUNIA
ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-200…	vendor-advisoryx_refsource_CALDERA
http://secunia.com/advisories/7756/	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/7907	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/7913/	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/7794	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.idefense.com/advisory/12.19.02.txt	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2002-295.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/7803	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/8080/	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=104032149026670&w=2	mailing-listx_refsource_BUGTRAQ

Date Public

2002-12-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.833Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "7858",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7858"
          },
          {
            "name": "7843",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7843"
          },
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_VULNWATCH",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
          },
          {
            "name": "9325",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/9325/"
          },
          {
            "name": "CSSA-2003-004.0",
            "tags": [
              "vendor-advisory",
              "x_refsource_CALDERA",
              "x_transferred"
            ],
            "url": "ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt"
          },
          {
            "name": "7756",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7756/"
          },
          {
            "name": "7907",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7907"
          },
          {
            "name": "7913",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7913/"
          },
          {
            "name": "7794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7794"
          },
          {
            "name": "SuSE-SA:2003:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/12.19.02.txt"
          },
          {
            "name": "RHSA-2002:295",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
          },
          {
            "name": "7803",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/7803"
          },
          {
            "name": "8080",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/8080/"
          },
          {
            "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-12-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "7858",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7858"
        },
        {
          "name": "7843",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7843"
        },
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_VULNWATCH"
          ],
          "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
        },
        {
          "name": "9325",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/9325/"
        },
        {
          "name": "CSSA-2003-004.0",
          "tags": [
            "vendor-advisory",
            "x_refsource_CALDERA"
          ],
          "url": "ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt"
        },
        {
          "name": "7756",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7756/"
        },
        {
          "name": "7907",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7907"
        },
        {
          "name": "7913",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7913/"
        },
        {
          "name": "7794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7794"
        },
        {
          "name": "SuSE-SA:2003:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/12.19.02.txt"
        },
        {
          "name": "RHSA-2002:295",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
        },
        {
          "name": "7803",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/7803"
        },
        {
          "name": "8080",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/8080/"
        },
        {
          "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1383",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "7858",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7858"
            },
            {
              "name": "7843",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7843"
            },
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "VULNWATCH",
              "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html"
            },
            {
              "name": "9325",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/9325/"
            },
            {
              "name": "CSSA-2003-004.0",
              "refsource": "CALDERA",
              "url": "ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt"
            },
            {
              "name": "7756",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7756/"
            },
            {
              "name": "7907",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7907"
            },
            {
              "name": "7913",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7913/"
            },
            {
              "name": "7794",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7794"
            },
            {
              "name": "SuSE-SA:2003:002",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
            },
            {
              "name": "http://www.idefense.com/advisory/12.19.02.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/12.19.02.txt"
            },
            {
              "name": "RHSA-2002:295",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
            },
            {
              "name": "7803",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/7803"
            },
            {
              "name": "8080",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/8080/"
            },
            {
              "name": "20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104032149026670\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1383",
    "datePublished": "2002-12-20T05:00:00.000Z",
    "dateReserved": "2002-12-18T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:19:28.833Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2002-1384 (GCVE-0-2002-1384)

Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2024-08-08 03:19

Summary

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

14 references

URL	Tags
http://www.debian.org/security/2003/dsa-232	vendor-advisoryx_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2002-295.html	vendor-advisoryx_refsource_REDHAT
http://www.mandrakesoft.com/security/advisories?n…	vendor-advisoryx_refsource_MANDRAKE
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/6475	vdb-entryx_refsource_BID
http://www.mandrakesoft.com/security/advisories?n…	vendor-advisoryx_refsource_MANDRAKE
http://marc.info/?l=bugtraq&m=104152282309980&w=2	vendor-advisoryx_refsource_GENTOO
http://www.idefense.com/advisory/12.23.02.txt	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2002-307.html	vendor-advisoryx_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.redhat.com/support/errata/RHSA-2003-216.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2003/dsa-226	vendor-advisoryx_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2003-037.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2003/dsa-222	vendor-advisoryx_refsource_DEBIAN

Date Public

2002-12-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.818Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-232",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-232"
          },
          {
            "name": "RHSA-2002:295",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
          },
          {
            "name": "MDKSA-2003:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:002"
          },
          {
            "name": "SUSE-SA:2003:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
          },
          {
            "name": "6475",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6475"
          },
          {
            "name": "MDKSA-2003:001",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
          },
          {
            "name": "GLSA-200301-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104152282309980\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/12.23.02.txt"
          },
          {
            "name": "RHSA-2002:307",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2002-307.html"
          },
          {
            "name": "pdftops-integer-overflow(10937)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10937"
          },
          {
            "name": "RHSA-2003:216",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2003-216.html"
          },
          {
            "name": "DSA-226",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-226"
          },
          {
            "name": "RHSA-2003:037",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2003-037.html"
          },
          {
            "name": "DSA-222",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-222"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-12-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-12-20T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-232",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-232"
        },
        {
          "name": "RHSA-2002:295",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
        },
        {
          "name": "MDKSA-2003:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:002"
        },
        {
          "name": "SUSE-SA:2003:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
        },
        {
          "name": "6475",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6475"
        },
        {
          "name": "MDKSA-2003:001",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
        },
        {
          "name": "GLSA-200301-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104152282309980\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/12.23.02.txt"
        },
        {
          "name": "RHSA-2002:307",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2002-307.html"
        },
        {
          "name": "pdftops-integer-overflow(10937)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10937"
        },
        {
          "name": "RHSA-2003:216",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2003-216.html"
        },
        {
          "name": "DSA-226",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-226"
        },
        {
          "name": "RHSA-2003:037",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2003-037.html"
        },
        {
          "name": "DSA-222",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-222"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1384",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-232",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-232"
            },
            {
              "name": "RHSA-2002:295",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2002-295.html"
            },
            {
              "name": "MDKSA-2003:002",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:002"
            },
            {
              "name": "SUSE-SA:2003:002",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2003_002_cups.html"
            },
            {
              "name": "6475",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6475"
            },
            {
              "name": "MDKSA-2003:001",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001"
            },
            {
              "name": "GLSA-200301-1",
              "refsource": "GENTOO",
              "url": "http://marc.info/?l=bugtraq\u0026m=104152282309980\u0026w=2"
            },
            {
              "name": "http://www.idefense.com/advisory/12.23.02.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/12.23.02.txt"
            },
            {
              "name": "RHSA-2002:307",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2002-307.html"
            },
            {
              "name": "pdftops-integer-overflow(10937)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10937"
            },
            {
              "name": "RHSA-2003:216",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2003-216.html"
            },
            {
              "name": "DSA-226",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-226"
            },
            {
              "name": "RHSA-2003:037",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2003-037.html"
            },
            {
              "name": "DSA-222",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-222"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1384",
    "datePublished": "2004-09-01T04:00:00.000Z",
    "dateReserved": "2002-12-18T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:19:28.818Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2015-01805 (CVE-2002-1366)

CVE-2002-1366 (GCVE-0-2002-1366)

CVE-2002-1367 (GCVE-0-2002-1367)

CVE-2002-1368 (GCVE-0-2002-1368)

CVE-2002-1369 (GCVE-0-2002-1369)

CVE-2002-1371 (GCVE-0-2002-1371)

CVE-2002-1372 (GCVE-0-2002-1372)

CVE-2002-1383 (GCVE-0-2002-1383)

CVE-2002-1384 (GCVE-0-2002-1384)

Tags

Sightings

Nomenclature

Related by attack behaviour