CUPS UDP数据包远程服务拒绝漏洞

漏洞信息详情

CUPS UDP数据包远程服务拒绝漏洞

• CNNVD编号：CNNVD-200409-082
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2004-0558
  
• 漏洞类型：
  
  
  其他
  
• 发布时间：
  
  2004-09-28
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2010-02-24
  
• 厂        商：
  
  easy_software_products
• 漏洞来源：
  Discovery of this …

CUPS 1.1.21之前版本中的Internet Printing Protocol(IPP)的安装启用存在漏洞。远程攻击者可以借助某个IPP端口的UDP数据包导致服务拒绝（服务挂起）。

SuSE has released advisory SUSE-SA:2004:031 to address this issue. Please see the attached advisory for information on obtaining and applying fixes.
ALT Linux have released an update to address this issue.
Red Hat has released advisory RHSA-2004:449-17 and fixes to address this issue on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information.
Debian has released advisory DSA 545-1 to address this issue. Please see the attached advisory for further information on obtaining and applying fixes.
Mandrake has released advisory MDKSA-2004:097 to address this issue. Please see the attached advisory for further information on obtaining and applying fixes.
CUPS 1.1.21 has been released to address this issue. A vendor patch for version 1.2.20 is also available.
Trustix Secure Linux has released an advisory (TSLSA-2004-0047) along with fixes dealing with this, and other issues. Please see the referenced advisory for further information.
Gentoo has released an advisory (GLSA 200409-25) and fixes for this issue. To obtain fixes, run the following commands:
emerge sync
emerge -pv “>=net-print/cups-1.1.20-r2”
emerge “>=net-print/cups-1.1.20-r2”
Slackware Linux has released an advisory (SSA:2004-266-01) along with fixes dealing with this issue.
RedHat has released an advisory (FEDORA-2004-275) to address this issue in Fedora Core 2. Please see the referenced advisory for more information.
Apple has released updates for this issue that may be applied through Software Update. Manual updates are also available. Please see the Apple advisory (APPLE-SA-2004-09-30) for more information.
Sun Microsystems has made a security alert (Sun Alert ID: 57646) along with a fix dealing with this issue. Sun advises that all users download and install the update. To download and install the updated RPMs from the update servers select the following from the launch bar:
Launch >> Applications >> System Tools >> Online Update
For more information please see the referenced Sun advisory.
SCO has released advisory SCOSA-2004.15 along with fixes to address this issue in SCO Unixware 7.1.3up and 7.1.4. Please see the referenced advisory for further information.
Conectiva has released advisory CLA-2004:872 to address this issue. Please see the attached advisory for details on obtaining and applying fixes.
Fedora Legacy has released advisory FLSA-2004:2072 along with fixes for RedHat Linux dealing with this issue. Please see the referenced advisory for more information.
Turbolinux has released advisory TLSA-2004-33 along with fixes dealing with this issue. Please see the referenced advisory for more information.
SCO has released advisory SCOSA-2005.51, along with fixes to address this issue in SCO OpenServer 5.0.7 and 6.0.0. Please see the referenced advisory for further information.
Sun Java Desktop System (JDS) 2003

• Sun patch-9321
  

Easy Software Products CUPS 1.1.14

• Debian cupsys-bsd_1.1.14-5woody6_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_alpha.deb
• Debian cupsys-bsd_1.1.14-5woody6_arm.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_arm.deb
• Debian cupsys-bsd_1.1.14-5woody6_hppa.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_hppa.deb
• Debian cupsys-bsd_1.1.14-5woody6_i386.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_i386.deb
• Debian cupsys-bsd_1.1.14-5woody6_ia64.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_ia64.deb
• Debian cupsys-bsd_1.1.14-5woody6_m68k.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_m68k.deb
• Debian cupsys-bsd_1.1.14-5woody6_mips.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_mips.deb
• Debian cupsys-bsd_1.1.14-5woody6_mipsel.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_mipsel.deb
• Debian cupsys-bsd_1.1.14-5woody6_powerpc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_powerpc.deb
• Debian cupsys-bsd_1.1.14-5woody6_s390.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_s390.deb
• Debian cupsys-bsd_1.1.14-5woody6_sparc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-bsd_1.1.1
  4-5woody6_sparc.deb
• Debian cupsys-client_1.1.14-5woody6_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-client_1.
  1.14-5woody6_alpha.deb
• Debian cupsys-client_1.1.14-5woody6_arm.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-client_1.
  1.14-5woody6_arm.deb
• Debian cupsys-client_1.1.14-5woody6_hppa.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-client_1.
  1.14-5woody6_hppa.deb
• Debian cupsys-client_1.1.14-5woody6_i386.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-client_1.
  1.14-5woody6_i386.deb
• Debian cupsys-client_1.1.14-5woody6_ia64.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/c/cupsys/cupsys-client_1.
  1