6.4

CVE-2009-0164

The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Cups Version <= 1.3.9
Apple ≫ Cups Version 1.1
Apple ≫ Cups Version 1.1.1
Apple ≫ Cups Version 1.1.2
Apple ≫ Cups Version 1.1.3
Apple ≫ Cups Version 1.1.4
Apple ≫ Cups Version 1.1.5
Apple ≫ Cups Version 1.1.5-1
Apple ≫ Cups Version 1.1.5-2
Apple ≫ Cups Version 1.1.6
Apple ≫ Cups Version 1.1.6-1
Apple ≫ Cups Version 1.1.6-2
Apple ≫ Cups Version 1.1.6-3
Apple ≫ Cups Version 1.1.7
Apple ≫ Cups Version 1.1.8
Apple ≫ Cups Version 1.1.9
Apple ≫ Cups Version 1.1.9-1
Apple ≫ Cups Version 1.1.10
Apple ≫ Cups Version 1.1.10-1
Apple ≫ Cups Version 1.1.11
Apple ≫ Cups Version 1.1.12
Apple ≫ Cups Version 1.1.13
Apple ≫ Cups Version 1.1.14
Apple ≫ Cups Version 1.1.15
Apple ≫ Cups Version 1.1.16
Apple ≫ Cups Version 1.1.17
Apple ≫ Cups Version 1.1.18
Apple ≫ Cups Version 1.1.19
Apple ≫ Cups Version 1.1.19 Update rc1
Apple ≫ Cups Version 1.1.19 Update rc2
Apple ≫ Cups Version 1.1.19 Update rc3
Apple ≫ Cups Version 1.1.19 Update rc4
Apple ≫ Cups Version 1.1.19 Update rc5
Apple ≫ Cups Version 1.1.20
Apple ≫ Cups Version 1.1.20 Update rc1
Apple ≫ Cups Version 1.1.20 Update rc2
Apple ≫ Cups Version 1.1.20 Update rc3
Apple ≫ Cups Version 1.1.20 Update rc4
Apple ≫ Cups Version 1.1.20 Update rc5
Apple ≫ Cups Version 1.1.20 Update rc6
Apple ≫ Cups Version 1.1.21
Apple ≫ Cups Version 1.1.21 Update rc1
Apple ≫ Cups Version 1.1.21 Update rc2
Apple ≫ Cups Version 1.1.22
Apple ≫ Cups Version 1.1.22 Update rc1
Apple ≫ Cups Version 1.1.22 Update rc2
Apple ≫ Cups Version 1.1.23
Apple ≫ Cups Version 1.1.23 Update rc1
Apple ≫ Cups Version 1.2 Update b1
Apple ≫ Cups Version 1.2 Update b2
Apple ≫ Cups Version 1.2 Update rc1
Apple ≫ Cups Version 1.2 Update rc2
Apple ≫ Cups Version 1.2 Update rc3
Apple ≫ Cups Version 1.2.0
Apple ≫ Cups Version 1.2.1
Apple ≫ Cups Version 1.2.2
Apple ≫ Cups Version 1.2.3
Apple ≫ Cups Version 1.2.4
Apple ≫ Cups Version 1.2.5
Apple ≫ Cups Version 1.2.6
Apple ≫ Cups Version 1.2.7
Apple ≫ Cups Version 1.2.8
Apple ≫ Cups Version 1.2.9
Apple ≫ Cups Version 1.2.10
Apple ≫ Cups Version 1.2.11
Apple ≫ Cups Version 1.2.12
Apple ≫ Cups Version 1.3 Update b1
Apple ≫ Cups Version 1.3 Update rc1
Apple ≫ Cups Version 1.3 Update rc2
Apple ≫ Cups Version 1.3.0
Apple ≫ Cups Version 1.3.1
Apple ≫ Cups Version 1.3.2
Apple ≫ Cups Version 1.3.3
Apple ≫ Cups Version 1.3.4
Apple ≫ Cups Version 1.3.5
Apple ≫ Cups Version 1.3.6
Apple ≫ Cups Version 1.3.7
Apple ≫ Cups Version 1.3.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.91% 0.852
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:N/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
http://secunia.com/advisories/35074
http://support.apple.com/kb/HT3549
http://www.us-cert.gov/cas/techalerts/TA09-133A.html
US Government Resource
http://www.vupen.com/english/advisories/2009/1297
http://security.gentoo.org/glsa/glsa-200904-20.xml
http://wiki.rpath.com/Advisories:rPSA-2009-0061
http://www.securityfocus.com/archive/1/502750/100/0/threaded
http://www.cups.org/articles.php?L582
Patch
Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=263070
http://www.cups.org/str.php?L3118
Patch
Vendor Advisory
http://www.securityfocus.com/bid/34665
https://bugzilla.redhat.com/show_bug.cgi?id=490597
Patch