5

CVE-2005-2874

Exploit
The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Easy Software Products ≫ Cups Version1.1
Easy Software Products ≫ Cups Version1.1.1
Easy Software Products ≫ Cups Version1.1.2
Easy Software Products ≫ Cups Version1.1.3
Easy Software Products ≫ Cups Version1.1.4
Easy Software Products ≫ Cups Version1.1.5
Easy Software Products ≫ Cups Version1.1.5_1
Easy Software Products ≫ Cups Version1.1.5_2
Easy Software Products ≫ Cups Version1.1.6
Easy Software Products ≫ Cups Version1.1.6_1
Easy Software Products ≫ Cups Version1.1.6_2
Easy Software Products ≫ Cups Version1.1.6_3
Easy Software Products ≫ Cups Version1.1.7
Easy Software Products ≫ Cups Version1.1.8
Easy Software Products ≫ Cups Version1.1.9
Easy Software Products ≫ Cups Version1.1.9_1
Easy Software Products ≫ Cups Version1.1.10
Easy Software Products ≫ Cups Version1.1.10_1
Easy Software Products ≫ Cups Version1.1.11
Easy Software Products ≫ Cups Version1.1.12
Easy Software Products ≫ Cups Version1.1.13
Easy Software Products ≫ Cups Version1.1.14
Easy Software Products ≫ Cups Version1.1.15
Easy Software Products ≫ Cups Version1.1.16
Easy Software Products ≫ Cups Version1.1.17
Easy Software Products ≫ Cups Version1.1.18
Easy Software Products ≫ Cups Version1.1.19
Easy Software Products ≫ Cups Version1.1.19_rc1
Easy Software Products ≫ Cups Version1.1.19_rc2
Easy Software Products ≫ Cups Version1.1.19_rc3
Easy Software Products ≫ Cups Version1.1.19_rc4
Easy Software Products ≫ Cups Version1.1.19_rc5
Easy Software Products ≫ Cups Version1.1.20
Easy Software Products ≫ Cups Version1.1.20_rc1
Easy Software Products ≫ Cups Version1.1.20_rc2
Easy Software Products ≫ Cups Version1.1.20_rc3
Easy Software Products ≫ Cups Version1.1.20_rc4
Easy Software Products ≫ Cups Version1.1.20_rc5
Easy Software Products ≫ Cups Version1.1.20_rc6
Easy Software Products ≫ Cups Version1.1.21
Easy Software Products ≫ Cups Version1.1.21_rc1
Easy Software Products ≫ Cups Version1.1.21_rc2
Easy Software Products ≫ Cups Version1.1.22
Easy Software Products ≫ Cups Version1.1.22_rc1
Easy Software Products ≫ Cups Version1.1.22_rc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.97% 0.855
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lwn.net/Alerts/152835/
http://securitytracker.com/id?1012811
Patch
Vendor Advisory
Exploit
http://www.cups.org/relnotes.php#010123
http://www.cups.org/str.php?L1042+P0+S-1+C0+I0+E0+Q1042
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-772.html
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168072
Patch
Vendor Advisory
Exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9774