ID de Prueba:	1.3.6.1.4.1.25623.1.0.800142
Categoría:	Denial of Service
Título:	CUPS < 1.3.8 DoS Vulnerability
Resumen:	CUPS (Common UNIX Printing System) Service is prone to a denial; of service (DoS) vulnerability.
Descripción:	Summary: CUPS (Common UNIX Printing System) Service is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to error in web interface (cgi-bin/admin.c), which uses the guest username when a user is not logged on to the web server. This leads to CSRF attacks with the add/cancel RSS subscription functions. Vulnerability Impact: Successful exploitation causes Denial of Service condition. Affected Software/OS: CUPS versions prior to 1.3.8 on Linux. Solution: Update to version 1.3.8 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5183 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html BugTraq ID: 32419 http://www.securityfocus.com/bid/32419 Debian Security Information: DSA-2176 (Google Search) http://www.debian.org/security/2011/dsa-2176 https://www.exploit-db.com/exploits/7150 http://www.mandriva.com/security/advisories?name=MDVSA-2009:028 http://lab.gnucitizen.org/projects/cups-0day http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/ http://www.openwall.com/lists/oss-security/2008/11/19/3 http://www.openwall.com/lists/oss-security/2008/11/19/4 http://www.openwall.com/lists/oss-security/2008/11/20/1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586 http://www.redhat.com/support/errata/RHSA-2008-1029.html http://www.securitytracker.com/id?1021396 http://secunia.com/advisories/33937 http://secunia.com/advisories/43521 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.vupen.com/english/advisories/2009/0422 http://www.vupen.com/english/advisories/2011/0535 XForce ISS Database: cups-rss-dos(46684) https://exchange.xforce.ibmcloud.com/vulnerabilities/46684 Common Vulnerability Exposure (CVE) ID: CVE-2008-5184
Copyright	Copyright (C) 2008 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.