Common Unix Printing System属性名称缓冲区溢出漏洞

漏洞信息详情

Common Unix Printing System属性名称缓冲区溢出漏洞

• CNNVD编号：CNNVD-200203-010
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2002-0063
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2002-03-08
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-08-31
  
• 厂        商：
  
  easy_software_products
• 漏洞来源：
  This vulnerability…

CUPS 1.1.14之前版本的ippRead函数存在缓冲区溢出漏洞。攻击者借助超长属性名称或者语言值执行任意代码。

Fixes available:
Easy Software Products CUPS 1.0.4

• Conectiva cups-devel-static-1.1.6-7cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/cups-devel-static-1.1.6-7
  cl.i386.rpm
• Debian cupsys-bsd_1.0.4-10_alpha.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-alpha/cups
  ys-bsd_1.0.4-10_alpha.deb
• Debian cupsys-bsd_1.0.4-10_arm.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-arm/cupsys
  -bsd_1.0.4-10_arm.deb
• Debian cupsys-bsd_1.0.4-10_i386.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-i386/cupsy
  s-bsd_1.0.4-10_i386.deb
• Debian cupsys-bsd_1.0.4-10_m68k.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-m68k/cupsy
  s-bsd_1.0.4-10_m68k.deb
• Debian cupsys-bsd_1.0.4-10_powerpc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/cu
  psys-bsd_1.0.4-10_powerpc.deb
• Debian cupsys-bsd_1.0.4-10_sparc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-sparc/cups
  ys-bsd_1.0.4-10_sparc.deb
• Debian cupsys_1.0.4-10_alpha.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-alpha/cups
  ys_1.0.4-10_alpha.deb
• Debian cupsys_1.0.4-10_arm.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-arm/cupsys
  _1.0.4-10_arm.deb
• Debian cupsys_1.0.4-10_i386.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-i386/cupsy
  s_1.0.4-10_i386.deb
• Debian cupsys_1.0.4-10_m68k.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-m68k/cupsy
  s_1.0.4-10_m68k.deb
• Debian cupsys_1.0.4-10_powerpc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/cu
  psys_1.0.4-10_powerpc.deb
• Debian cupsys_1.0.4-10_sparc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-sparc/cups
  ys_1.0.4-10_sparc.deb
• Debian libcupsys1-dev_1.0.4-10_alpha.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libc
  upsys1-dev_1.0.4-10_alpha.deb
• Debian libcupsys1-dev_1.0.4-10_arm.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-arm/libcup
  sys1-dev_1.0.4-10_arm.deb
• Debian libcupsys1-dev_1.0.4-10_i386.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-i386/libcu
  psys1-dev_1.0.4-10_i386.deb
• Debian libcupsys1-dev_1.0.4-10_m68k.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-m68k/libcu
  psys1-dev_1.0.4-10_m68k.deb
• Debian libcupsys1-dev_1.0.4-10_powerpc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li
  bcupsys1-dev_1.0.4-10_powerpc.deb
• Debian libcupsys1-dev_1.0.4-10_sparc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libc
  upsys1-dev_1.0.4-10_sparc.deb
• Debian libcupsys1_1.0.4-10_alpha.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libc
  upsys1_1.0.4-10_alpha.deb
• Debian libcupsys1_1.0.4-10_arm.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-arm/libcup
  sys1_1.0.4-10_arm.deb
• Debian libcupsys1_1.0.4-10_i386.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-i386/libcu
  psys1_1.0.4-10_i386.deb
• Debian libcupsys1_1.0.4-10_m68k.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-m68k/libcu
  psys1_1.0.4-10_m68k.deb
• Debian libcupsys1_1.0.4-10_powerpc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li
  bcupsys1_1.0.4-10_powerpc.deb
• Debian libcupsys1_1.0.4-10_sparc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libc
  upsys1_1.0.4-10_sparc.deb

Easy Software Products CUPS 1.1.1

• Red Hat cups-1.1.14-5.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/cups-1.1.14-5.alpha.r
  pm
• Red Hat cups-1.1.14-5.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/cups-1.1.14-5.i386.rpm
  
• Red Hat cups-devel-1.1.14-5.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/cups-devel-1.1.14-5.a
  lpha.rpm
• Red Hat cups-devel-1.1.14-5.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/cups-devel-1.1.14-5.i3
  86.rpm

Easy Software Products CUPS 1.1.10

• Caldera cups-1.1.10-5.i386.rpmOpenLinux 3.1.1 Server
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/RPMS/
  cups-1.1.10-5.i386.rpm
• Caldera cups-1.1.10-5.i386.r

来源: MANDRAKE
名称: MDKSA-2002:015
链接:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-015.php

来源: DEBIAN
名称: DSA-110
链接:http://www.debian.org/security/2002/dsa-110

来源: www.cups.org
链接:http://www.cups.org/relnotes.html

来源: XF
名称: cups-ippread-bo(8192)
链接:http://xforce.iss.net/xforce/xfdb/8192

来源: BID
名称: 4100
链接:http://www.securityfocus.com/bid/4100

来源: REDHAT
名称: RHSA-2002:032
链接:http://www.redhat.com/support/errata/RHSA-2002-032.html

来源: SUSE
名称: SuSE-SA:2002:005
链接:http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html

来源: CONECTIVA
名称: CLA-2002:471
链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000471

来源: CALDERA
名称: CSSA-2002-008.0
链接:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-008.0.txt