CVE-2002-1368

Published: Dec 26, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.

Affected (15)

Products: Easy Software Products: Cups · Apple: Mac Os X

Easy Software Products

1 product

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Easy Software Products Cups	Version 1.0.4
Easy Software Products Cups	Version 1.0.4_8
Easy Software Products Cups	Version 1.1.10
Easy Software Products Cups	Version 1.1.13
Easy Software Products Cups	Version 1.1.14
Easy Software Products Cups	Version 1.1.17
Easy Software Products Cups	Version 1.1.1
Easy Software Products Cups	Version 1.1.4
Easy Software Products Cups	Version 1.1.4_2
Easy Software Products Cups	Version 1.1.4_3
Easy Software Products Cups	Version 1.1.4_5
Easy Software Products Cups	Version 1.1.6
Easy Software Products Cups	Version 1.1.7

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.2.2
Apple Mac Os X	Version 10.2

References (40)

ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104032149026670&w=2

Source: cve@mitre.org

http://secunia.com/advisories/7756/

Source: cve@mitre.org

http://secunia.com/advisories/7794

Source: cve@mitre.org

http://secunia.com/advisories/7803

Source: cve@mitre.org

http://secunia.com/advisories/7843

Source: cve@mitre.org

http://secunia.com/advisories/7858

Source: cve@mitre.org

http://secunia.com/advisories/7907

Source: cve@mitre.org

http://secunia.com/advisories/7913/

Source: cve@mitre.org

http://secunia.com/advisories/8080/

Source: cve@mitre.org

http://secunia.com/advisories/9325/

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-232

Source: cve@mitre.org

http://www.idefense.com/advisory/12.19.02.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2003:001

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2003_002_cups.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-295.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/6437

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/10909

Source: cve@mitre.org

ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104032149026670&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/7756/

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/7794

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/7803

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/7843

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/7858

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/7907

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/7913/

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/8080/

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/9325/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-232

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.idefense.com/advisory/12.19.02.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2003:001

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2003_002_cups.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2002-295.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/6437

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/10909

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.