1.0.4 8 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2005-0206		Overflow	2005-04-27	2017-10-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
2	CVE-2004-2154		Bypass	2004-12-31	2017-10-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.
3	CVE-2004-1270			2005-01-10	2018-10-03	2.1	None	Local	Low	Not required	None	Partial	None
lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.
4	CVE-2004-1269			2005-01-10	2018-10-03	5.0	None	Remote	Low	Not required	None	None	Partial
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail.
5	CVE-2004-1268			2005-01-10	2018-10-03	2.1	None	Local	Low	Not required	None	Partial	None
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.
6	CVE-2004-1267	119	Exec Code Overflow	2005-01-10	2018-10-03	6.5	None	Remote	Low	???	Partial	Partial	Partial
Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbitrary code via a crafted HPGL file.
7	CVE-2004-0927			2005-01-27	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.
8	CVE-2004-0926		Exec Code Overflow	2005-01-27	2008-09-05	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.
9	CVE-2004-0924			2005-01-27	2008-09-05	5.0	None	Remote	Low	Not required	None	Partial	None
NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not.
10	CVE-2004-0923		+Info	2005-01-27	2017-10-11	2.1	None	Local	Low	Not required	Partial	None	None
CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.
11	CVE-2004-0889		DoS Exec Code Overflow	2005-01-27	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.
12	CVE-2004-0888		DoS Exec Code Overflow	2005-01-27	2017-10-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
13	CVE-2003-0788		DoS	2003-12-01	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service (CPU consumption from a "busy loop") via certain inputs to the IPP port (TCP 631).
14	CVE-2002-1384		Exec Code Overflow	2003-01-02	2018-05-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
15	CVE-2002-1383		Exec Code Overflow	2002-12-26	2016-10-18	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.
16	CVE-2002-1372		DoS	2002-12-26	2017-10-10	5.0	None	Remote	Low	Not required	None	None	Partial
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.
17	CVE-2002-1371		Exec Code	2002-12-26	2017-10-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
18	CVE-2002-1369		Exec Code Overflow	2002-12-26	2017-10-10	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
19	CVE-2002-1368		DoS Exec Code	2002-12-26	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.
20	CVE-2002-1367			2002-12-26	2017-10-10	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.

Total number of vulnerabilities : 20 Page : 1 (This Page)