CVE-2005-2874

The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.

• easy software products cups 1.1 • easy software products cups 1.1.1 • easy software products cups 1.1.2 • easy software products cups 1.1.3 • easy software products cups 1.1.4 • easy software products cups 1.1.5 • easy software products cups 1.1.5 1 • easy software products cups 1.1.5 2 • easy software products cups 1.1.6 • easy software products cups 1.1.6 1 • easy software products cups 1.1.6 2 • easy software products cups 1.1.6 3 • easy software products cups 1.1.7 • easy software products cups 1.1.8 • easy software products cups 1.1.9 • easy software products cups 1.1.9 1 • easy software products cups 1.1.10 • easy software products cups 1.1.10 1 • easy software products cups 1.1.11 • easy software products cups 1.1.12 • easy software products cups 1.1.13 • easy software products cups 1.1.14 • easy software products cups 1.1.15 • easy software products cups 1.1.16 • easy software products cups 1.1.17 • easy software products cups 1.1.18 • easy software products cups 1.1.19 • easy software products cups 1.1.19 rc1 • easy software products cups 1.1.19 rc2 • easy software products cups 1.1.19 rc3 • easy software products cups 1.1.19 rc4 • easy software products cups 1.1.19 rc5 • easy software products cups 1.1.20 • easy software products cups 1.1.20 rc1 • easy software products cups 1.1.20 rc2 • easy software products cups 1.1.20 rc3 • easy software products cups 1.1.20 rc4 • easy software products cups 1.1.20 rc5 • easy software products cups 1.1.20 rc6 • easy software products cups 1.1.21 • easy software products cups 1.1.21 rc1 • easy software products cups 1.1.21 rc2 • easy software products cups 1.1.22 • easy software products cups 1.1.22 rc1 • easy software products cups 1.1.22 rc2