This updates fix several bugs, but only the security fixes are listed here :

  - CVE-2010-2941: CVSS v2 Base Score: 3.3     (AV:A/AC:L/Au:N/C:N/I:N/A:P): CWE-399 Special IPP     requests allow to crashcupsd remotely.

  - CVE-2010-0542: CVSS v2 Base Score: 6.8     (AV:N/AC:M/Au:N/C:P/I:P/A:P): CWE-264 A NULL pointer     dereference exists in the _WriteProlog() function of the     texttops image filter.

  - CVE-2010-1748: CVSS v2 Base Score: 4.3     (AV:N/AC:M/Au:N/C:P/I:N/A:N): CWE-119 An attacker with     access to the web-interface may be able to read some     bytes of uninitialized memory.

New upstream release fixing several security issues: CVE-2010-0540, CVE-2010-0542, CVE-2010-1748.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of CUPS installed on the remote host is earlier than 1.4.4. Such versions are affected by several vulnerabilities :

  - The patch for STR #3200 / CVE-2009-3553 was not     complete. A remote client can cause a denial of service     by causing the CUPS server to reference an already     freed resource. (STR #3490) (CVE-2010-0302)

  - The CUPS daemon may be vulnerable to certain cross-site     request forgery (CSRF) attacks, e.g., malicious IFRAME     attacks. (STR #3498) (CVE-2010-0540)

  - An unprivileged process may be able to cause the CUPS     server to overwrite arbitrary files as the root user.
    (STR #3510) (CVE-2010-2431)

  - The CUPS daemon is vulnerable to a heap corruption     attack as the 'textops' filter does not verify the     results of memory allocations. It is possible this     may lead to arbitrary code execution. (STR #3516)     (CVE-2010-0542)

  - The CUPS daemon is vulnerable to a denial of service     attack if compiled without HAVE_GSSAPI. (STR #3518)     (CVE-2010-2432)

  - The CUPS daemon is vulnerable to an information     disclosure attack as an attacker can view portions of     uninitialized memory by a specially crafted URL.
    (STR #3577) (CVE-2010-1748)

This update fixes the following vulnerabilities in cups :

  - A specially crafted PDF file could crash the pdftops     potentially even cause execution of arbitrary code.
    (CVE-2010-3702: CVSS v2 Base Score: 5.8).
    (CVE-2010-3702)

  - A NULL pointer dereference issue exists in the
    _WriteProlog function of texttops. (CVE-2010-0542: CVSS     v2 Base Score: 6.8: Permissions, Privileges, and Access     Control (CWE-264)). (CVE-2010-0542)

  - Memory disclosure in web interface. (CVE-2010-1748: CVSS     v2 Base Score: 4.3: Buffer Errors (CWE-119)).
    (CVE-2010-1748)

Several vulnerabilities have been discovered in the Common UNIX Printing System :

  - CVE-2008-5183     A NULL pointer dereference in RSS job completion     notifications could lead to denial of service.

  - CVE-2009-3553     It was discovered that incorrect file descriptor     handling could lead to denial of service.

  - CVE-2010-0540     A cross-site request forgery vulnerability was     discovered in the web interface.

  - CVE-2010-0542     Incorrect memory management in the filter subsystem     could lead to denial of service.

  - CVE-2010-1748     Information disclosure in the web interface.

  - CVE-2010-2431     Emmanuel Bouillon discovered a symlink vulnerability in     handling of cache files.

  - CVE-2010-2432     Denial of service in the authentication code.

  - CVE-2010-2941     Incorrect memory management in the IPP code could lead     to denial of service or the execution of arbitrary code.

The remote host is running CUPS, an open source print server. 

Versions of CUPS earlier than 1.4.4 are potentially affected by multiple vulnerabilities.

  - The texttops filter does not check the results of memory allocations. (STR #3715)

  - A use-after-free vulnerability in the abstract file-descriptor handling interface.  Note that this is related to an incomplete patch for CVE-2009-3553. (STR #3490)

  - In certain instances, the web interface can disclose the contents of memory. (STR #3577)

  - CUPS can overwrite files as root in directories not owned or writeable by non-root users. (STR #3510)

  - An infinite loop can occur when CUPS is not compiled with HAVE_GSSAPI. (STR #3518)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
53654	openSUSE Security Update : cups (openSUSE-SU-2010:1018-1)	Nessus	SuSE Local Security Checks	2011/5/5	2021/1/14	high
47206	Fedora 11 : cups-1.4.4-4.fc11 (2010-10066)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	medium
47683	CUPS < 1.4.4 Multiple Vulnerabilities	Nessus	Misc.	2010/7/8	2018/7/6	high
47835	Fedora 12 : cups-1.4.4-5.fc12 (2010-10101)	Nessus	Fedora Local Security Checks	2010/7/27	2021/1/11	medium
50984	SuSE 10 Security Update : CUPS (ZYPP Patch Number 7244)	Nessus	SuSE Local Security Checks	2010/12/6	2021/1/14	medium
52484	Debian DSA-2176-1 : cups - several vulnerabilities	Nessus	Debian Local Security Checks	2011/3/2	2021/1/4	high
5574	CUPS < 1.4.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2010/6/18	2019/3/6	medium

検出

プラグインの検索

high

medium

high

medium

medium

high

medium