Red Hat Security AdvisoryRHSA-2009:1595
cups security update
Released 2009-11-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) cups-1:1.3.7-11.el5_4.4, cups-1:1.3.7-11.el5_4.4.i386, cups-1:1.3.7-11.el5_4.4.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) cups-1:1.3.7-11.el5_4.4, cups-1:1.3.7-11.el5_4.4.i386, cups-libs-1:1.3.7-11.el5_4.4 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cups-1:1.3.7-11.el5_4.4, cups-devel-1:1.3.7-11.el5_4.4, cups-devel-1:1.3.7-11.el5_4.4.i386
Fixes 2 records
Priority LOW 39
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a de…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03913 · Published 2009-11-20 · Fixed CWE-416
Priority LOW 29
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site s…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0578 · Published 2009-11-10 · Fixed CWE-79
