Test ID:	1.3.6.1.4.1.25623.1.0.54349
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2005:571
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2005:571. The Common UNIX Printing System (CUPS) provides a portable printing layer for UNIX(R) operating systems. When processing a request, the CUPS scheduler would use case-sensitive matching on the queue name to decide which authorization policy should be used. However, queue names are not case-sensitive. An unauthorized user could print to a password-protected queue without needing a password. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2154 to this issue. Please note that the version of CUPS included in Red Hat Enterprise Linux 4 is not vulnerable to this issue. All users of CUPS should upgrade to these erratum packages which contain a backported patch to correct this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2005-571.html Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2154 FLSA:163274 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163274 RHSA-2005:571 http://www.redhat.com/support/errata/RHSA-2005-571.html SUSE-SR:2005:018 http://www.novell.com/linux/security/advisories/2005_18_sr.html USN-185-1 http://www.ubuntu.com/usn/usn-185-1 http://www.cups.org/str.php?L700 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162405 oval:org.mitre.oval:def:9940 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9940 Common Vulnerability Exposure (CVE) ID: CVE-2005-2154 BugTraq ID: 14127 http://www.securityfocus.com/bid/14127 Bugtraq: 20050701 [SECURITY ALERT] osTicket bugs (Google Search) http://seclists.org/lists/bugtraq/2005/Jul/0009.html http://securitytracker.com/id?1014373
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.