CVEvulnerability
CVE-2002-1369
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-12-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
Affected configurations
• easy software products cups 1.0.4
• easy software products cups 1.0.4 8
• easy software products cups 1.1.1
• easy software products cups 1.1.4
• easy software products cups 1.1.4 2
• easy software products cups 1.1.4 3
• easy software products cups 1.1.4 5
• easy software products cups 1.1.6
• easy software products cups 1.1.7
• easy software products cups 1.1.10
• easy software products cups 1.1.13
• easy software products cups 1.1.14
• easy software products cups 1.1.17
• apple mac os x 10.2
• apple mac os x 10.2.2
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html archives.neohapsis.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=104032149026670&w=2 marc.info
- http://www.debian.org/security/2003/dsa-232 www.debian.org
- http://www.idefense.com/advisory/12.19.02.txt Exploit, Vendor Advisory
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 www.mandrakesoft.com
- http://www.novell.com/linux/security/advisories/2003_002_cups.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2002-295.html www.redhat.com
- http://www.securityfocus.com/bid/6438 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10910 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html archives.neohapsis.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=104032149026670&w=2 marc.info
- http://www.debian.org/security/2003/dsa-232 www.debian.org
- http://www.idefense.com/advisory/12.19.02.txt Exploit, Vendor Advisory
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 www.mandrakesoft.com
- http://www.novell.com/linux/security/advisories/2003_002_cups.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2002-295.html www.redhat.com
- http://www.securityfocus.com/bid/6438 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10910 exchange.xforce.ibmcloud.com