Easy Software Products CUPS访问控制列表绕过漏洞-一一网

漏洞信息详情

Easy Software Products CUPS访问控制列表绕过漏洞

CNNVD编号：CNNVD-200412-588

危害等级：高危
CVE编号：
CVE-2004-2154
漏洞类型：

访问验证错误
发布时间：

2004-12-31
威胁类型：

远程
更新时间：

2005-10-20
厂商：

easy_software_products
漏洞来源：
This issue was rep…

漏洞简介

CUPS 1.1.21rc1以前版本将cupsd.conf的Location指令作为敏感情况。攻击者可以借助包含大写或小写字母的打印机名称绕过预定ACLs，该打印机名称与指令中指明的不同。

漏洞公告

The vendor has released a fixed version of the affected software to address this issue.
Please see the referenced advisories for more information.
Easy Software Products CUPS 1.0.4 -8

Easy Software Products CUPS 1.1.21

http://www.cups.org/software.php

Easy Software Products CUPS 1.0.4

Easy Software Products CUPS 1.1.21

http://www.cups.org/software.php

Easy Software Products CUPS 1.1.1

Easy Software Products CUPS 1.1.21

http://www.cups.org/software.php

Easy Software Products CUPS 1.1.10

Easy Software Products CUPS 1.1.21

http://www.cups.org/software.php

Easy Software Products CUPS 1.1.12

Easy Software Products CUPS 1.1.21

http://www.cups.org/software.php

Easy Software Products CUPS 1.1.13

Easy Software Products CUPS 1.1.21

http://www.cups.org/software.php

Easy Software Products CUPS 1.1.14

Easy Software Products CUPS 1.1.21

http://www.cups.org/software.php
RedHat cups-1.1.14-15.4.5.legacy.i386.rpmRed Hat Linux 7.3

http://download.fedoralegacy.org/redhat/7.3/updates/i386/cups-1.1.14-1
5.4.5.legacy.i386.rpm
RedHat cups-1.1.17-13.3.0.14.legacy.i386.rpmRed Hat Linux 9

http://download.fedoralegacy.org/redhat/9/updates/i386/cups-1.1.17-13.
3.0.14.legacy.i386.rpm
RedHat cups-devel-1.1.14-15.4.5.legacy.i386.rpmRed Hat Linux 7.3

http://download.fedoralegacy.org/redhat/7.3/updates/i386/cups-devel-1.
1.14-15.4.5.legacy.i386.rpm
RedHat cups-devel-1.1.17-13.3.0.14.legacy.i386.rpmRed Hat Linux 9

http://download.fedoralegacy.org/redhat/9/updates/i386/cups-devel-1.1.
17-13.3.0.14.legacy.i386.rpm
RedHat cups-libs-1.1.14-15.4.5.legacy.i386.rpmFedora Legacy 7.3

http://download.fedoralegacy.org/redhat/7.3/updates/i386/cups-libs-1.1
.14-15.4.5.legacy.i386.rpm
RedHat cups-libs-1.1.17-13.3.0.14.legacy.i386.rpmRed Hat Linux 9

http://download.fedoralegacy.org/redhat/9/updates/i386/cups-libs-1.1.1
7-13.3.0.14.legacy.i386.rpm

Easy Software Products CUPS 1.1.15

Easy Software Products CUPS 1.1.21

http://www.cups.org/software.php

Easy Software Products CUPS 1.1.16

Easy Software Products CUPS 1.1.21

http://www.cups.org/software.php
Mandriva cups-1.1.20-5.9.C30mdk.i586.rpmCorporate 3.0:

http://www1.mandrivalinux.com/en/ftp.php3
Mandriva cups-common-1.1.20-5.9.C30mdk.i586.rpmCorporate 3.0:

http://www1.mandrivalinux.com/en/ftp.php3
Mandriva cups-serial-1.1.20-5.9.C30mdk.i586.rpmCorporate 3.0:

http://www1.mandrivalinux.com/en/ftp.php3
Mandriva libcups1-1.1.18-2.11.C21mdk.i586.rpmCorporate Server 2.1:

http://www1.mandrivalinux.com/en/ftp.php3
Mandriva libcups1-1.1.18-2.11.C21mdk.x86_64.rpmCorporate Server 2.1/X86_64

http://www1.mandrivalinux.com/en/ftp.php3
Mandriva libcups1-devel-1.1.18-2.11.C21mdk.i586.rpmCorporate Server 2.1:

http://www1.mandrivalinux.com/en/ftp.php3
Mandriva libcups1-devel-1.1.18-2.11.C21mdk.x86_64.rpmCorporate Server 2.1/X86_64

http://www1.mandrivalinux.com/en/ftp.php3
Mandriva libcups2-1.1.20-5.9.C30mdk.i586.rpmCorporate 3.0:

http://www1.mandrivalinux.com/en/ftp.php3
Mandriva libcups2-devel-1.1.20-5.9.C30mdk.i586.rpmCorporate 3.0:

http://www1.mandrivalinux.com/en/ftp.php3