Test ID:	1.3.6.1.4.1.25623.1.0.800581
Category:	Denial of Service
Title:	CUPS IPP Packets Processing Denial of Service Vulnerability
Summary:	Check for the Version of CUPS
Description:	Overview: This host is running CUPS, and is prone to Denial of Service Vulnerability. Vulnerability Insight: The flaw is cause due to a NULL-pointer dereference that occurs when processing two consecutive IPP_TAG_UNSUPPORTED tags in specially crafted IPP (Internet Printing Protocol) packets. Impact: An attacker can exploit will allow application to crash. Impact Level: Application Affected Software/OS: CUPS version prior to 1.3.10 Fix: Upgrade to version 1.3.10 or latest http://www.cups.org/software.php References: http://www.coresecurity.com/content/AppleCUPS-null-pointer-vulnerability
Cross-Ref:	BugTraq ID: 35169 Common Vulnerability Exposure (CVE) ID: CVE-2009-0949 Bugtraq: 20090602 CORE-2009-0420 - Apple CUPS IPP_TAG_UNSUPPORTED Handling null pointer Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/504032/100/0/threaded http://www.coresecurity.com/content/AppleCUPS-null-pointer-vulnerability http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html Debian Security Information: DSA-1811 (Google Search) http://www.debian.org/security/2009/dsa-1811 http://www.redhat.com/support/errata/RHSA-2009-1082.html http://www.redhat.com/support/errata/RHSA-2009-1083.html SuSE Security Announcement: SUSE-SR:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html http://www.ubuntu.com/usn/USN-780-1 http://www.securityfocus.com/bid/35169 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9631 http://securitytracker.com/id?1022321 http://secunia.com/advisories/35322 http://secunia.com/advisories/35328 http://secunia.com/advisories/35340 http://secunia.com/advisories/35342 http://secunia.com/advisories/35685 http://secunia.com/advisories/36701 XForce ISS Database: apple-cups-ipptag-dos(50926) http://xforce.iss.net/xforce/xfdb/50926
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: