Test Kennung:	1.3.6.1.4.1.25623.1.0.800142
Kategorie:	Denial of Service
Titel:	CUPS Subscription Incorrectly uses Guest Account DoS Vulnerability
Zusammenfassung:	This host is running CUPS (Common UNIX Printing System) Service,; which is prone to Denial of Service Vulnerability.
Beschreibung:	Summary: This host is running CUPS (Common UNIX Printing System) Service, which is prone to Denial of Service Vulnerability. Vulnerability Insight: The flaw is due to error in web interface (cgi-bin/admin.c), which uses the guest username when a user is not logged on to the web server. This leads to CSRF attacks with the add/cancel RSS subscription functions. Vulnerability Impact: Successful exploitation causes Denial of Service condition. Affected Software/OS: CUPS Versions prior to 1.3.8 on Linux. Solution: Upgrade to CUPS Version 1.3.8 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	BugTraq ID: 32419 Common Vulnerability Exposure (CVE) ID: CVE-2008-5183 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://www.securityfocus.com/bid/32419 Debian Security Information: DSA-2176 (Google Search) http://www.debian.org/security/2011/dsa-2176 https://www.exploit-db.com/exploits/7150 http://www.mandriva.com/security/advisories?name=MDVSA-2009:028 http://lab.gnucitizen.org/projects/cups-0day http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/ http://www.openwall.com/lists/oss-security/2008/11/19/3 http://www.openwall.com/lists/oss-security/2008/11/19/4 http://www.openwall.com/lists/oss-security/2008/11/20/1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586 http://www.redhat.com/support/errata/RHSA-2008-1029.html http://www.securitytracker.com/id?1021396 http://secunia.com/advisories/33937 http://secunia.com/advisories/43521 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.vupen.com/english/advisories/2009/0422 http://www.vupen.com/english/advisories/2011/0535 XForce ISS Database: cups-rss-dos(46684) https://exchange.xforce.ibmcloud.com/vulnerabilities/46684 Common Vulnerability Exposure (CVE) ID: CVE-2008-5184
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.