Security Advisory (MDKSA-2003:104): cups

[aru]

MandrakeSoft Security Advisory MDKSA-2003:104 : cups

 

November 5th, 2003

Updated CUPS packages fix denial of service vulnerability

 

A bug in versions of CUPS prior to 1.1.19 was reported by Paul Mitcheson in the Internet Printing Protocol (IPP) implementation would result in CUPS going into a busy loop, which could result in a Denial of Service (DoS) condition. To be able to exploit this problem, an attacker would need to be able to make a TCP connection to the IPP port (port 631 by default).

 

The provided packages have been patched to correct this problem.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 9.0
  
• Corporate Server 2.1
  

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:104

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2003-0788

 

Posted automatically by aru (mdksec2mub v0.0.7)