Test ID:	1.3.6.1.4.1.25623.1.0.891288
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-1288-1)
Summary:	The remote host is missing an update for the Debian 'cups' package(s) announced via the DLA-1288-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'cups' package(s) announced via the DLA-1288-1 advisory. Vulnerability Insight: It was discovered that there was an issue in the CUPS printer framework where remote attackers could execute arbitrary commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. This was caused by a whitelisted localhost.localdomain entry. For Debian 7 Wheezy, this issue has been fixed in cups version 1.5.3-5+deb7u7. We recommend that you upgrade your cups packages. Affected Software/OS: 'cups' package(s) on Debian 7. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-18190 https://bugs.chromium.org/p/project-zero/issues/detail?id=1048 https://github.com/apple/cups/commit/afa80cb2b457bf8d64f775bed307588610476c41 https://lists.debian.org/debian-lts-announce/2018/02/msg00023.html https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html https://usn.ubuntu.com/3577-1/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.